type=DAEMON_START msg=audit(1718702253.723:7917): op=start ver=3.0.7 format=enriched kernel=5.14.0-284.11.1.el9_2.x86_64 auid=4294967295 pid=684 uid=0 ses=4294967295 subj=system_u:system_r:auditd_t:s0 res=successAUID="unset" UID="root" type=SERVICE_START msg=audit(1718702253.731:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-update-done comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1718702253.780:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=rpcbind comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CONFIG_CHANGE msg=audit(1718702253.926:7): op=set audit_backlog_limit=8192 old=64 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 res=1AUID="unset" type=SYSCALL msg=audit(1718702253.926:7): arch=c000003e syscall=44 success=yes exit=60 a0=3 a1=7ffc765f8350 a2=3c a3=0 items=0 ppid=689 pid=699 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:unconfined_service_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendto AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1718702253.926:7): proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 type=CONFIG_CHANGE msg=audit(1718702253.926:8): op=set audit_failure=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 res=1AUID="unset" type=SYSCALL msg=audit(1718702253.926:8): arch=c000003e syscall=44 success=yes exit=60 a0=3 a1=7ffc765f8350 a2=3c a3=0 items=0 ppid=689 pid=699 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:unconfined_service_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendto AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1718702253.926:8): proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 type=CONFIG_CHANGE msg=audit(1718702253.926:9): op=set audit_backlog_wait_time=60000 old=60000 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 res=1AUID="unset" type=SYSCALL msg=audit(1718702253.926:9): arch=c000003e syscall=44 success=yes exit=60 a0=3 a1=7ffc765f8350 a2=3c a3=0 items=0 ppid=689 pid=699 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:unconfined_service_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendto AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1718702253.926:9): proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 type=SERVICE_START msg=audit(1718702253.928:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=auditd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SYSTEM_BOOT msg=audit(1718702253.934:11): pid=706 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1718702253.939:12): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1718702253.955:13): prog-id=18 op=LOAD type=SERVICE_START msg=audit(1718702253.966:14): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=irqbalance comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1718702253.973:15): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=rngd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1718702254.014:16): prog-id=19 op=LOAD type=BPF msg=audit(1718702254.014:17): prog-id=20 op=LOAD type=BPF msg=audit(1718702254.014:18): prog-id=21 op=LOAD type=SERVICE_START msg=audit(1718702254.018:19): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dracut-shutdown comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1718702254.160:20): prog-id=22 op=LOAD type=SERVICE_START msg=audit(1718702254.587:21): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1718702254.764:22): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=chronyd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1718702254.929:23): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbus-broker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1718702254.957:24): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-logind comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1718702260.693:25): prog-id=23 op=LOAD type=BPF msg=audit(1718702260.693:26): prog-id=24 op=LOAD type=SERVICE_START msg=audit(1718702260.743:27): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1718702260.833:28): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cloud-init-local comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1718702260.947:29): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1718702261.236:30): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1718702261.257:31): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=gssproxy comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1718702261.361:32): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=ADD_GROUP msg=audit(1718702263.723:33): pid=888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cloud_init_t:s0 msg='op=add-group acct="rocky" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=ADD_USER msg=audit(1718702263.727:34): pid=888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cloud_init_t:s0 msg='op=add-user acct="rocky" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_MGMT msg=audit(1718702263.727:35): pid=888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cloud_init_t:s0 msg='op=add-user-to-group grp="adm" acct="rocky" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_MGMT msg=audit(1718702263.727:36): pid=888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cloud_init_t:s0 msg='op=add-user-to-group grp="systemd-journal" acct="rocky" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_MGMT msg=audit(1718702263.727:37): pid=888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cloud_init_t:s0 msg='op=add-to-shadow-group grp="adm" acct="rocky" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_MGMT msg=audit(1718702263.727:38): pid=888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cloud_init_t:s0 msg='op=add-to-shadow-group grp="systemd-journal" acct="rocky" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_MGMT msg=audit(1718702264.001:39): pid=888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cloud_init_t:s0 msg='op=add-home-dir id=1000 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" ID="rocky" type=ACCT_LOCK msg=audit(1718702264.063:40): pid=895 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:passwd_t:s0 msg='op=locked-password id=1000 exe="/usr/bin/passwd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" ID="rocky" type=SERVICE_START msg=audit(1718702265.072:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cloud-init comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1718702265.105:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=rpc-statd-notify comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1718702265.111:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-user-sessions comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1718702265.114:44): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=crond comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1718702265.117:45): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=getty@tty1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1718702265.121:46): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=serial-getty@ttyS0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1718702265.127:47): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SYSTEM_RUNLEVEL msg=audit(1718702265.145:48): pid=914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='old-level=N new-level=3 comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1718702265.147:49): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-update-utmp-runlevel comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1718702265.147:50): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-update-utmp-runlevel comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1718702265.593:51): pid=902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:81:7e:64:29:ab:8e:e2:5c:d2:c0:04:94:33:3c:6d:7d:8c:36:a3:31:d6:b7:f4:63:49:4e:be:02:8a:f8:14:96 direction=? spid=902 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=SERVICE_STOP msg=audit(1718702265.598:52): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1718702265.624:53): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1718702265.705:54): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cloud-config comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1718702266.386:55): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cloud-final comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1718702266.586:56): pid=1666 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:81:7e:64:29:ab:8e:e2:5c:d2:c0:04:94:33:3c:6d:7d:8c:36:a3:31:d6:b7:f4:63:49:4e:be:02:8a:f8:14:96 direction=? spid=1666 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_KEY_USER msg=audit(1718702266.595:57): pid=1670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:81:7e:64:29:ab:8e:e2:5c:d2:c0:04:94:33:3c:6d:7d:8c:36:a3:31:d6:b7:f4:63:49:4e:be:02:8a:f8:14:96 direction=? spid=1670 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1718702266.596:58): pid=1667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=1670 suid=74 rport=53512 laddr=10.0.0.28 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1718702266.596:59): pid=1667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=1670 suid=74 rport=53512 laddr=10.0.0.28 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1718702266.715:60): pid=1667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1718702266.715:61): pid=1667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:92:3f:76:ae:b3:c4:29:f5:3c:2c:a0:b6:51:ea:7a:b4:2a:ad:64:ca:1e:07:10:fa:50:6f:d7:e1:04:76:6a:e7 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1718702266.842:62): pid=1667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1718702266.842:63): pid=1667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1670 suid=74 rport=53512 laddr=10.0.0.28 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1718702266.849:64): pid=1667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1718702266.849:65): pid=1667 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=1 res=1UID="root" OLD-AUID="unset" AUID="rocky" type=SYSCALL msg=audit(1718702266.849:65): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffc73d69b50 a2=4 a3=3e8 items=0 ppid=1140 pid=1667 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1718702266.849:65): proctitle=737368643A20726F636B79205B707269765D type=USER_ROLE_CHANGE msg=audit(1718702266.855:66): pid=1667 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=SERVICE_START msg=audit(1718702266.927:67): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1718702267.017:68): pid=1772 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRED_ACQ msg=audit(1718702267.017:69): pid=1772 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="rocky" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=USER_ROLE_CHANGE msg=audit(1718702267.017:70): pid=1772 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1718702267.017:71): pid=1772 uid=0 subj=system_u:system_r:init_t:s0 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=2 res=1UID="root" OLD-AUID="unset" AUID="rocky" type=SYSCALL msg=audit(1718702267.017:71): arch=c000003e syscall=1 success=yes exit=4 a0=7 a1=7ffe1b1df310 a2=4 a3=3e8 items=0 ppid=1 pid=1772 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=2 comm="(systemd)" exe="/usr/lib/systemd/systemd" subj=system_u:system_r:init_t:s0 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1718702267.017:71): proctitle="(systemd)" type=USER_START msg=audit(1718702267.018:72): pid=1772 uid=0 auid=1000 ses=2 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="rocky" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" type=SERVICE_START msg=audit(1718702267.115:73): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1718702267.124:74): pid=1667 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=CRYPTO_KEY_USER msg=audit(1718702267.125:75): pid=1887 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:81:7e:64:29:ab:8e:e2:5c:d2:c0:04:94:33:3c:6d:7d:8c:36:a3:31:d6:b7:f4:63:49:4e:be:02:8a:f8:14:96 direction=? spid=1887 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=CRED_ACQ msg=audit(1718702267.126:76): pid=1887 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_LOGIN msg=audit(1718702267.175:77): pid=1667 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1718702267.175:78): pid=1667 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1718702267.176:79): pid=1667 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:81:7e:64:29:ab:8e:e2:5c:d2:c0:04:94:33:3c:6d:7d:8c:36:a3:31:d6:b7:f4:63:49:4e:be:02:8a:f8:14:96 direction=? spid=1919 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1718702267.217:80): pid=1667 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1718702267.217:81): pid=1667 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1718702267.218:82): pid=1667 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1718702267.218:83): pid=1667 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1718702267.221:84): pid=1667 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:81:7e:64:29:ab:8e:e2:5c:d2:c0:04:94:33:3c:6d:7d:8c:36:a3:31:d6:b7:f4:63:49:4e:be:02:8a:f8:14:96 direction=? spid=1950 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1718702267.235:85): pid=1667 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1718702267.235:86): pid=1667 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1718702267.238:87): pid=1667 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1718702267.238:88): pid=1667 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1718702267.240:89): pid=1667 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:81:7e:64:29:ab:8e:e2:5c:d2:c0:04:94:33:3c:6d:7d:8c:36:a3:31:d6:b7:f4:63:49:4e:be:02:8a:f8:14:96 direction=? spid=1963 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1718702267.355:90): pid=1983 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1718702267.355:91): pid=1983 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=646E6620696E7374616C6C202D792062696E642062696E642D7574696C7320686170726F7879206874747064206E65742D746F6F6C73 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1718702267.356:92): pid=1983 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1718702267.357:93): pid=1983 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=SERVICE_STOP msg=audit(1718702271.412:94): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1718702281.023:95): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kdump comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=ADD_GROUP msg=audit(1718702282.816:96): pid=4051 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-group id=48 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" ID="apache" type=GRP_MGMT msg=audit(1718702282.843:97): pid=4051 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-shadow-group id=48 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" ID="apache" type=ADD_USER msg=audit(1718702282.910:98): pid=4058 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=add-user acct="apache" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" type=ADD_GROUP msg=audit(1718702283.671:99): pid=4069 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-group id=25 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" ID="named" type=GRP_MGMT msg=audit(1718702283.675:100): pid=4069 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-shadow-group id=25 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" ID="named" type=ADD_USER msg=audit(1718702283.726:101): pid=4075 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=add-user acct="named" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" type=SERVICE_STOP msg=audit(1718702291.043:102): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1718702291.063:103): prog-id=0 op=UNLOAD type=BPF msg=audit(1718702291.063:104): prog-id=0 op=UNLOAD type=MAC_POLICY_LOAD msg=audit(1718702292.634:105): auid=1000 ses=1 lsm=selinux res=1AUID="rocky" type=SYSCALL msg=audit(1718702292.634:105): arch=c000003e syscall=1 success=yes exit=3511466 a0=4 a1=7fe6e3800000 a2=3594aa a3=0 items=0 ppid=4094 pid=4104 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:unconfined_r:load_policy_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1718702292.634:105): proctitle="/sbin/load_policy" type=ADD_GROUP msg=audit(1718702292.821:106): pid=4110 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-group id=987 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" ID="haproxy" type=GRP_MGMT msg=audit(1718702292.834:107): pid=4110 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-shadow-group id=987 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" ID="haproxy" type=ADD_USER msg=audit(1718702292.902:108): pid=4117 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=add-user acct="haproxy" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" type=SERVICE_START msg=audit(1718702293.321:109): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-rdb8624aa4e674c03a6cc838f29418677 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1718702293.572:110): prog-id=25 op=LOAD type=BPF msg=audit(1718702293.572:111): prog-id=26 op=LOAD type=BPF msg=audit(1718702293.572:112): prog-id=0 op=UNLOAD type=BPF msg=audit(1718702293.572:113): prog-id=0 op=UNLOAD type=BPF msg=audit(1718702293.573:114): prog-id=27 op=LOAD type=BPF msg=audit(1718702293.573:115): prog-id=0 op=UNLOAD type=BPF msg=audit(1718702293.575:116): prog-id=28 op=LOAD type=BPF msg=audit(1718702293.575:117): prog-id=0 op=UNLOAD type=BPF msg=audit(1718702293.578:118): prog-id=29 op=LOAD type=BPF msg=audit(1718702293.578:119): prog-id=0 op=UNLOAD type=BPF msg=audit(1718702293.578:120): prog-id=30 op=LOAD type=BPF msg=audit(1718702293.578:121): prog-id=31 op=LOAD type=BPF msg=audit(1718702293.578:122): prog-id=0 op=UNLOAD type=BPF msg=audit(1718702293.578:123): prog-id=0 op=UNLOAD type=BPF msg=audit(1718702293.580:124): prog-id=32 op=LOAD type=BPF msg=audit(1718702293.580:125): prog-id=0 op=UNLOAD type=BPF msg=audit(1718702293.580:126): prog-id=33 op=LOAD type=BPF msg=audit(1718702293.580:127): prog-id=34 op=LOAD type=BPF msg=audit(1718702293.580:128): prog-id=0 op=UNLOAD type=BPF msg=audit(1718702293.580:129): prog-id=0 op=UNLOAD type=SOFTWARE_UPDATE msg=audit(1718702293.605:130): pid=2054 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="apr-1.7.0-12.el9_3.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" type=SOFTWARE_UPDATE msg=audit(1718702293.605:131): pid=2054 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="apr-util-bdb-1.6.1-23.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" type=SOFTWARE_UPDATE msg=audit(1718702293.605:132): pid=2054 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="apr-util-1.6.1-23.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" type=SOFTWARE_UPDATE msg=audit(1718702293.606:133): pid=2054 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="apr-util-openssl-1.6.1-23.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" type=SOFTWARE_UPDATE msg=audit(1718702293.606:134): pid=2054 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="bind-license-32:9.16.23-18.el9_4.1.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" type=SOFTWARE_UPDATE msg=audit(1718702293.606:135): pid=2054 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="protobuf-c-1.3.3-13.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" type=SOFTWARE_UPDATE msg=audit(1718702293.606:136): pid=2054 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="fstrm-0.6.1-3.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" type=SOFTWARE_UPDATE msg=audit(1718702293.606:137): pid=2054 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libuv-1:1.42.0-1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" type=SOFTWARE_UPDATE msg=audit(1718702293.606:138): pid=2054 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="bind-libs-32:9.16.23-18.el9_4.1.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" type=SOFTWARE_UPDATE msg=audit(1718702293.606:139): pid=2054 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="bind-utils-32:9.16.23-18.el9_4.1.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" type=SOFTWARE_UPDATE msg=audit(1718702293.606:140): pid=2054 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="bind-dnssec-doc-32:9.16.23-18.el9_4.1.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" type=SOFTWARE_UPDATE msg=audit(1718702293.606:141): pid=2054 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="httpd-tools-2.4.57-8.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" type=SOFTWARE_UPDATE msg=audit(1718702293.607:142): pid=2054 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="httpd-filesystem-2.4.57-8.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" type=SOFTWARE_UPDATE msg=audit(1718702293.607:143): pid=2054 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="rocky-logos-httpd-90.15-2.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" type=SOFTWARE_UPDATE msg=audit(1718702293.607:144): pid=2054 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-ply-3.11-14.el9.0.1.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" type=SOFTWARE_UPDATE msg=audit(1718702293.607:145): pid=2054 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-bind-32:9.16.23-18.el9_4.1.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" type=SOFTWARE_UPDATE msg=audit(1718702293.607:146): pid=2054 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="bind-dnssec-utils-32:9.16.23-18.el9_4.1.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" type=SOFTWARE_UPDATE msg=audit(1718702293.607:147): pid=2054 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="mailcap-2.1.49-5.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" type=SOFTWARE_UPDATE msg=audit(1718702293.607:148): pid=2054 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="httpd-core-2.4.57-8.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" type=SOFTWARE_UPDATE msg=audit(1718702293.607:149): pid=2054 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="mod_lua-2.4.57-8.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" type=SOFTWARE_UPDATE msg=audit(1718702293.607:150): pid=2054 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="httpd-2.4.57-8.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" type=SOFTWARE_UPDATE msg=audit(1718702293.607:151): pid=2054 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="mod_http2-2.0.26-2.el9_4.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" type=SOFTWARE_UPDATE msg=audit(1718702293.607:152): pid=2054 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="bind-32:9.16.23-18.el9_4.1.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" type=SOFTWARE_UPDATE msg=audit(1718702293.607:153): pid=2054 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="haproxy-2.4.22-3.el9_3.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" type=SOFTWARE_UPDATE msg=audit(1718702293.607:154): pid=2054 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="net-tools-2.0-0.62.20160912git.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" type=USER_END msg=audit(1718702296.654:155): pid=1983 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1718702296.654:156): pid=1983 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1718702296.657:157): pid=1667 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1718702296.657:158): pid=1667 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1718702296.658:159): pid=1667 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1718702296.658:160): pid=1667 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1718702296.661:161): pid=1667 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:81:7e:64:29:ab:8e:e2:5c:d2:c0:04:94:33:3c:6d:7d:8c:36:a3:31:d6:b7:f4:63:49:4e:be:02:8a:f8:14:96 direction=? spid=5765 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1718702296.675:162): pid=1667 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1718702296.675:163): pid=1667 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1718702296.676:164): pid=1667 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1718702296.676:165): pid=1667 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1718702296.678:166): pid=1667 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:81:7e:64:29:ab:8e:e2:5c:d2:c0:04:94:33:3c:6d:7d:8c:36:a3:31:d6:b7:f4:63:49:4e:be:02:8a:f8:14:96 direction=? spid=5803 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1718702296.693:167): pid=1667 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1718702296.693:168): pid=1667 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=SERVICE_STOP msg=audit(1718702297.328:169): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-rdb8624aa4e674c03a6cc838f29418677 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1718702297.338:170): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cloud-final comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1718702297.338:171): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cloud-config comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1718702297.339:172): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1718702297.350:173): pid=1140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:81:7e:64:29:ab:8e:e2:5c:d2:c0:04:94:33:3c:6d:7d:8c:36:a3:31:d6:b7:f4:63:49:4e:be:02:8a:f8:14:96 direction=? spid=1140 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_END msg=audit(1718702297.353:174): pid=1667 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=CRED_DISP msg=audit(1718702297.353:175): pid=1667 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=CRYPTO_KEY_USER msg=audit(1718702297.353:176): pid=1667 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:81:7e:64:29:ab:8e:e2:5c:d2:c0:04:94:33:3c:6d:7d:8c:36:a3:31:d6:b7:f4:63:49:4e:be:02:8a:f8:14:96 direction=? spid=1667 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=SERVICE_STOP msg=audit(1718702297.357:177): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1718702297.368:178): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=irqbalance comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1718702297.370:179): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=rngd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1718702297.372:180): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=chronyd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1718702297.374:181): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=crond comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1718702297.375:182): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=getty@tty1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1718702297.376:183): prog-id=0 op=UNLOAD type=SERVICE_STOP msg=audit(1718702297.380:184): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=serial-getty@ttyS0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1718702297.382:185): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1718702297.387:186): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dracut-shutdown comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1718702297.389:187): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1718702297.580:188): prog-id=35 op=LOAD type=BPF msg=audit(1718702297.580:189): prog-id=36 op=LOAD type=BPF msg=audit(1718702297.580:190): prog-id=0 op=UNLOAD type=BPF msg=audit(1718702297.580:191): prog-id=0 op=UNLOAD type=BPF msg=audit(1718702297.581:192): prog-id=37 op=LOAD type=BPF msg=audit(1718702297.581:193): prog-id=0 op=UNLOAD type=BPF msg=audit(1718702297.583:194): prog-id=38 op=LOAD type=BPF msg=audit(1718702297.583:195): prog-id=0 op=UNLOAD type=BPF msg=audit(1718702297.583:196): prog-id=39 op=LOAD type=BPF msg=audit(1718702297.583:197): prog-id=40 op=LOAD type=BPF msg=audit(1718702297.583:198): prog-id=0 op=UNLOAD type=BPF msg=audit(1718702297.583:199): prog-id=0 op=UNLOAD type=BPF msg=audit(1718702297.584:200): prog-id=41 op=LOAD type=BPF msg=audit(1718702297.584:201): prog-id=0 op=UNLOAD type=BPF msg=audit(1718702297.584:202): prog-id=42 op=LOAD type=BPF msg=audit(1718702297.584:203): prog-id=43 op=LOAD type=BPF msg=audit(1718702297.584:204): prog-id=0 op=UNLOAD type=BPF msg=audit(1718702297.584:205): prog-id=0 op=UNLOAD type=SERVICE_STOP msg=audit(1718702297.595:206): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1718702297.597:207): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1718702297.599:208): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1718702297.618:209): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-user-sessions comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1718702297.619:210): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-logind comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1718702297.621:211): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1718702297.622:212): prog-id=0 op=UNLOAD type=SERVICE_STOP msg=audit(1718702297.631:213): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=gssproxy comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1718702297.652:214): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1718702297.655:215): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cloud-init-local comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1718702297.666:216): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1718702297.670:217): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbus-broker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1718702297.675:218): prog-id=0 op=UNLOAD type=SERVICE_STOP msg=audit(1718702297.684:219): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=nis-domainname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1718702297.685:220): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1718702297.686:221): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1718702297.687:222): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-update-done comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1718702297.688:223): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ldconfig comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1718702297.689:224): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1718702297.690:225): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1718702297.691:226): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SYSTEM_SHUTDOWN msg=audit(1718702297.699:227): pid=6484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1718702297.703:228): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=DAEMON_END msg=audit(1718702297.706:7918): op=terminate auid=0 pid=1 subj=system_u:system_r:init_t:s0 res=successAUID="root" type=DAEMON_START msg=audit(1744634617.625:6634): op=start ver=3.0.7 format=enriched kernel=5.14.0-284.11.1.el9_2.x86_64 auid=4294967295 pid=705 uid=0 ses=4294967295 subj=system_u:system_r:auditd_t:s0 res=successAUID="unset" UID="root" type=SERVICE_START msg=audit(1744634617.642:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=rpcbind comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CONFIG_CHANGE msg=audit(1744634617.675:6): op=set audit_backlog_limit=8192 old=64 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 res=1AUID="unset" type=SYSCALL msg=audit(1744634617.675:6): arch=c000003e syscall=44 success=yes exit=60 a0=3 a1=7fffb86642f0 a2=3c a3=0 items=0 ppid=710 pid=720 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:unconfined_service_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendto AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634617.675:6): proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 type=CONFIG_CHANGE msg=audit(1744634617.675:7): op=set audit_failure=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 res=1AUID="unset" type=SYSCALL msg=audit(1744634617.675:7): arch=c000003e syscall=44 success=yes exit=60 a0=3 a1=7fffb86642f0 a2=3c a3=0 items=0 ppid=710 pid=720 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:unconfined_service_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendto AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634617.675:7): proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 type=CONFIG_CHANGE msg=audit(1744634617.675:8): op=set audit_backlog_wait_time=60000 old=60000 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 res=1AUID="unset" type=SYSCALL msg=audit(1744634617.675:8): arch=c000003e syscall=44 success=yes exit=60 a0=3 a1=7fffb86642f0 a2=3c a3=0 items=0 ppid=710 pid=720 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:unconfined_service_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendto AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634617.675:8): proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 type=SERVICE_START msg=audit(1744634617.677:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=auditd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SYSTEM_BOOT msg=audit(1744634617.684:10): pid=727 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1744634617.690:11): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1744634617.707:12): prog-id=18 op=LOAD type=SERVICE_START msg=audit(1744634617.723:13): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=irqbalance comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1744634617.731:14): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=rngd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1744634617.743:15): prog-id=19 op=LOAD type=BPF msg=audit(1744634617.743:16): prog-id=20 op=LOAD type=BPF msg=audit(1744634617.743:17): prog-id=21 op=LOAD type=SERVICE_START msg=audit(1744634617.755:18): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dracut-shutdown comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1744634617.758:19): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1744634617.761:20): prog-id=22 op=LOAD type=SERVICE_START msg=audit(1744634617.781:21): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=chronyd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1744634617.789:22): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r144c3220c34d4a8cbfe8d5e2bbfab50a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1744634618.013:23): prog-id=23 op=LOAD type=BPF msg=audit(1744634618.013:24): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634618.013:25): prog-id=24 op=LOAD type=BPF msg=audit(1744634618.013:26): prog-id=25 op=LOAD type=BPF msg=audit(1744634618.013:27): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634618.013:28): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634618.015:29): prog-id=26 op=LOAD type=BPF msg=audit(1744634618.015:30): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634618.016:31): prog-id=27 op=LOAD type=BPF msg=audit(1744634618.016:32): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634618.016:33): prog-id=28 op=LOAD type=BPF msg=audit(1744634618.016:34): prog-id=29 op=LOAD type=BPF msg=audit(1744634618.016:35): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634618.016:36): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634618.020:37): prog-id=30 op=LOAD type=BPF msg=audit(1744634618.020:38): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634618.020:39): prog-id=31 op=LOAD type=BPF msg=audit(1744634618.020:40): prog-id=32 op=LOAD type=BPF msg=audit(1744634618.020:41): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634618.020:42): prog-id=0 op=UNLOAD type=SERVICE_START msg=audit(1744634618.035:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=logrotate comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1744634618.035:44): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=logrotate comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1744634618.037:45): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-restart-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1744634618.037:46): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-restart-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1744634618.039:47): prog-id=33 op=LOAD type=BPF msg=audit(1744634618.039:48): prog-id=0 op=UNLOAD type=SERVICE_START msg=audit(1744634618.096:49): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbus-broker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1744634618.103:50): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-logind comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1744634619.481:51): prog-id=34 op=LOAD type=BPF msg=audit(1744634619.481:52): prog-id=35 op=LOAD type=SERVICE_START msg=audit(1744634619.534:53): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1744634619.628:54): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cloud-init-local comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1744634619.694:55): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1744634619.731:56): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=gssproxy comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1744634619.761:57): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1744634619.819:58): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=ACCT_LOCK msg=audit(1744634621.045:59): pid=4522 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:passwd_t:s0 msg='op=locked-password id=1000 exe="/usr/bin/passwd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" ID="rocky" type=SERVICE_START msg=audit(1744634621.537:60): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cloud-init comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1744634621.571:61): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=rpc-statd-notify comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1744634621.586:62): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-user-sessions comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1744634621.590:63): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=crond comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1744634621.595:64): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=getty@tty1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1744634621.600:65): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=serial-getty@ttyS0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1744634621.606:66): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SYSTEM_RUNLEVEL msg=audit(1744634621.616:67): pid=5231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='old-level=N new-level=3 comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1744634621.619:68): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-update-utmp-runlevel comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1744634621.619:69): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-update-utmp-runlevel comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1744634622.035:70): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cloud-config comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1744634622.590:71): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cloud-final comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1744634622.933:72): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kdump comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1744634625.048:73): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1744634625.048:74): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1744634625.059:75): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r144c3220c34d4a8cbfe8d5e2bbfab50a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1744634629.912:76): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744634631.430:77): pid=11675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=11675 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1744634631.432:78): pid=11674 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=11675 suid=74 rport=57826 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1744634631.432:79): pid=11674 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=11675 suid=74 rport=57826 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1744634631.529:80): pid=11674 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744634631.529:81): pid=11674 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1744634631.565:82): pid=11674 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744634631.566:83): pid=11674 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11675 suid=74 rport=57826 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1744634631.568:84): pid=11674 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1744634631.568:85): pid=11674 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=1 res=1UID="root" OLD-AUID="unset" AUID="rocky" type=SYSCALL msg=audit(1744634631.568:85): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffcab5aaa10 a2=4 a3=3e8 items=0 ppid=5198 pid=11674 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634631.568:85): proctitle=737368643A20726F636B79205B707269765D type=USER_ROLE_CHANGE msg=audit(1744634631.571:86): pid=11674 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=SERVICE_START msg=audit(1744634631.602:87): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1744634631.641:88): pid=11678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRED_ACQ msg=audit(1744634631.642:89): pid=11678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="rocky" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=USER_ROLE_CHANGE msg=audit(1744634631.642:90): pid=11678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1744634631.642:91): pid=11678 uid=0 subj=system_u:system_r:init_t:s0 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=2 res=1UID="root" OLD-AUID="unset" AUID="rocky" type=SYSCALL msg=audit(1744634631.642:91): arch=c000003e syscall=1 success=yes exit=4 a0=7 a1=7ffe2f7afdf0 a2=4 a3=3e8 items=0 ppid=1 pid=11678 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=2 comm="(systemd)" exe="/usr/lib/systemd/systemd" subj=system_u:system_r:init_t:s0 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634631.642:91): proctitle="(systemd)" type=USER_START msg=audit(1744634631.643:92): pid=11678 uid=0 auid=1000 ses=2 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="rocky" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" type=SERVICE_START msg=audit(1744634631.741:93): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1744634631.749:94): pid=11674 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634631.751:95): pid=11687 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=11687 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=CRED_ACQ msg=audit(1744634631.752:96): pid=11687 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_LOGIN msg=audit(1744634631.800:97): pid=11674 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634631.800:98): pid=11674 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634631.801:99): pid=11674 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=11688 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634631.833:100): pid=11674 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634631.833:101): pid=11674 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634631.833:102): pid=11674 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11687 suid=1000 rport=57826 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634631.834:103): pid=11674 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=11687 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634631.836:104): pid=11674 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=CRED_DISP msg=audit(1744634631.837:105): pid=11674 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634631.837:106): pid=11674 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=11674 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=CRYPTO_KEY_USER msg=audit(1744634631.864:107): pid=11702 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=11702 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1744634631.865:108): pid=11701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=11702 suid=74 rport=57834 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1744634631.865:109): pid=11701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=11702 suid=74 rport=57834 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1744634631.934:110): pid=11701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744634631.934:111): pid=11701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1744634631.970:112): pid=11701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744634631.970:113): pid=11701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11702 suid=74 rport=57834 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1744634631.972:114): pid=11701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1744634631.972:115): pid=11701 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=3 res=1UID="root" OLD-AUID="unset" AUID="rocky" type=SYSCALL msg=audit(1744634631.972:115): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7fff490bb320 a2=4 a3=3e8 items=0 ppid=5198 pid=11701 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=3 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634631.972:115): proctitle=737368643A20726F636B79205B707269765D type=USER_ROLE_CHANGE msg=audit(1744634631.972:116): pid=11701 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_START msg=audit(1744634631.985:117): pid=11701 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634631.986:118): pid=11704 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=11704 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=CRED_ACQ msg=audit(1744634631.986:119): pid=11704 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_LOGIN msg=audit(1744634632.033:120): pid=11701 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634632.033:121): pid=11701 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634632.035:122): pid=11701 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=11705 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634632.086:123): pid=11701 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634632.086:124): pid=11701 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634632.087:125): pid=11701 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11704 suid=1000 rport=57834 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634632.087:126): pid=11701 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=11704 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634632.089:127): pid=11701 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=CRED_DISP msg=audit(1744634632.089:128): pid=11701 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634632.089:129): pid=11701 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=11701 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=CRYPTO_KEY_USER msg=audit(1744634632.109:130): pid=11720 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=11720 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1744634632.110:131): pid=11719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=11720 suid=74 rport=57838 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1744634632.110:132): pid=11719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=11720 suid=74 rport=57838 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1744634632.180:133): pid=11719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744634632.181:134): pid=11719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1744634632.220:135): pid=11719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744634632.220:136): pid=11719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11720 suid=74 rport=57838 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1744634632.221:137): pid=11719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1744634632.221:138): pid=11719 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=4 res=1UID="root" OLD-AUID="unset" AUID="rocky" type=SYSCALL msg=audit(1744634632.221:138): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffd4f4c3880 a2=4 a3=3e8 items=0 ppid=5198 pid=11719 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634632.221:138): proctitle=737368643A20726F636B79205B707269765D type=USER_ROLE_CHANGE msg=audit(1744634632.222:139): pid=11719 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_START msg=audit(1744634632.235:140): pid=11719 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634632.236:141): pid=11722 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=11722 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=CRED_ACQ msg=audit(1744634632.237:142): pid=11722 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_LOGIN msg=audit(1744634632.284:143): pid=11719 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634632.284:144): pid=11719 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634632.285:145): pid=11719 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=11723 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634632.333:146): pid=11719 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634632.333:147): pid=11719 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634632.333:148): pid=11719 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11722 suid=1000 rport=57838 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634632.333:149): pid=11719 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=11722 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634632.335:150): pid=11719 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=CRED_DISP msg=audit(1744634632.335:151): pid=11719 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634632.335:152): pid=11719 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=11719 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=CRYPTO_KEY_USER msg=audit(1744634632.351:153): pid=11738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=11738 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1744634632.352:154): pid=11737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=11738 suid=74 rport=57844 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1744634632.352:155): pid=11737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=11738 suid=74 rport=57844 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1744634632.424:156): pid=11737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744634632.424:157): pid=11737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1744634632.460:158): pid=11737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744634632.460:159): pid=11737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11738 suid=74 rport=57844 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1744634632.462:160): pid=11737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1744634632.462:161): pid=11737 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=5 res=1UID="root" OLD-AUID="unset" AUID="rocky" type=SYSCALL msg=audit(1744634632.462:161): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7fffc67c2240 a2=4 a3=3e8 items=0 ppid=5198 pid=11737 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=5 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634632.462:161): proctitle=737368643A20726F636B79205B707269765D type=USER_ROLE_CHANGE msg=audit(1744634632.463:162): pid=11737 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_START msg=audit(1744634632.473:163): pid=11737 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634632.474:164): pid=11740 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=11740 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=CRED_ACQ msg=audit(1744634632.475:165): pid=11740 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_LOGIN msg=audit(1744634632.522:166): pid=11737 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634632.522:167): pid=11737 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634632.523:168): pid=11737 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=11741 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744634632.610:169): pid=11756 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744634632.611:170): pid=11756 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=6370202D66202E2F7069702E636F6E66202F6574632F7069702E636F6E66 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744634632.611:171): pid=11756 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744634632.616:172): pid=11756 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634632.623:173): pid=11756 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744634632.623:174): pid=11756 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_ACCT msg=audit(1744634632.667:175): pid=11759 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744634632.668:176): pid=11759 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=6D6B646972202D70202F6574632F646F636B65722F exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744634632.668:177): pid=11759 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744634632.670:178): pid=11759 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634632.674:179): pid=11759 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744634632.674:180): pid=11759 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_ACCT msg=audit(1744634632.713:181): pid=11762 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744634632.713:182): pid=11762 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=6370202D66202E2F646F636B65722D6461656D6F6E2E6A736F6E202F6574632F646F636B65722F6461656D6F6E2E6A736F6E exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744634632.714:183): pid=11762 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744634632.715:184): pid=11762 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634632.721:185): pid=11762 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744634632.721:186): pid=11762 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634632.724:187): pid=11737 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11740 suid=1000 rport=57844 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634632.724:188): pid=11737 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=11740 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634632.725:189): pid=11737 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=CRED_DISP msg=audit(1744634632.726:190): pid=11737 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_END msg=audit(1744634632.726:191): pid=11737 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634632.726:192): pid=11737 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634632.726:193): pid=11737 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=11737 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=CRYPTO_KEY_USER msg=audit(1744634632.746:194): pid=11766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=11766 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1744634632.747:195): pid=11765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=11766 suid=74 rport=57856 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1744634632.747:196): pid=11765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=11766 suid=74 rport=57856 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1744634632.817:197): pid=11765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744634632.817:198): pid=11765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1744634632.855:199): pid=11765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744634632.856:200): pid=11765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11766 suid=74 rport=57856 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1744634632.856:201): pid=11765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1744634632.857:202): pid=11765 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=6 res=1UID="root" OLD-AUID="unset" AUID="rocky" type=SYSCALL msg=audit(1744634632.857:202): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffd630c4da0 a2=4 a3=3e8 items=0 ppid=5198 pid=11765 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=6 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634632.857:202): proctitle=737368643A20726F636B79205B707269765D type=USER_ROLE_CHANGE msg=audit(1744634632.858:203): pid=11765 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_START msg=audit(1744634632.871:204): pid=11765 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634632.873:205): pid=11768 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=11768 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=CRED_ACQ msg=audit(1744634632.875:206): pid=11768 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_LOGIN msg=audit(1744634632.921:207): pid=11765 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634632.921:208): pid=11765 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634632.922:209): pid=11765 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=11769 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634632.947:210): pid=11765 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634632.947:211): pid=11765 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634632.947:212): pid=11765 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11768 suid=1000 rport=57856 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634632.948:213): pid=11765 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=11768 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634632.950:214): pid=11765 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=CRED_DISP msg=audit(1744634632.950:215): pid=11765 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634632.951:216): pid=11765 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=11765 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=CRYPTO_KEY_USER msg=audit(1744634632.969:217): pid=11783 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=11783 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1744634632.970:218): pid=11782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=11783 suid=74 rport=57860 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1744634632.970:219): pid=11782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=11783 suid=74 rport=57860 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1744634633.045:220): pid=11782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744634633.045:221): pid=11782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1744634633.085:222): pid=11782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744634633.086:223): pid=11782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11783 suid=74 rport=57860 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1744634633.088:224): pid=11782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1744634633.088:225): pid=11782 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=7 res=1UID="root" OLD-AUID="unset" AUID="rocky" type=SYSCALL msg=audit(1744634633.088:225): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffc21a099d0 a2=4 a3=3e8 items=0 ppid=5198 pid=11782 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634633.088:225): proctitle=737368643A20726F636B79205B707269765D type=USER_ROLE_CHANGE msg=audit(1744634633.090:226): pid=11782 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_START msg=audit(1744634633.103:227): pid=11782 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634633.103:228): pid=11785 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=11785 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=CRED_ACQ msg=audit(1744634633.104:229): pid=11785 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_LOGIN msg=audit(1744634633.151:230): pid=11782 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634633.152:231): pid=11782 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634633.153:232): pid=11782 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=11786 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744634633.216:233): pid=11803 uid=1000 auid=1000 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744634633.217:234): pid=11803 uid=1000 auid=1000 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=657468746F6F6C202D4B2065746830207478206F6666 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744634633.217:235): pid=11803 uid=1000 auid=1000 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744634633.220:236): pid=11803 uid=1000 auid=1000 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634633.223:237): pid=11803 uid=1000 auid=1000 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744634633.224:238): pid=11803 uid=1000 auid=1000 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634633.227:239): pid=11782 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634633.227:240): pid=11782 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634633.227:241): pid=11782 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11785 suid=1000 rport=57860 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634633.228:242): pid=11782 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=11785 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634633.229:243): pid=11782 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=CRED_DISP msg=audit(1744634633.230:244): pid=11782 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634633.230:245): pid=11782 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=11782 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=CRYPTO_KEY_USER msg=audit(1744634633.249:246): pid=11807 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=11807 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1744634633.250:247): pid=11806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=11807 suid=74 rport=57866 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1744634633.250:248): pid=11806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=11807 suid=74 rport=57866 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1744634633.326:249): pid=11806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744634633.326:250): pid=11806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1744634633.362:251): pid=11806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744634633.362:252): pid=11806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11807 suid=74 rport=57866 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1744634633.363:253): pid=11806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1744634633.363:254): pid=11806 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=8 res=1UID="root" OLD-AUID="unset" AUID="rocky" type=SYSCALL msg=audit(1744634633.363:254): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffeddde36c0 a2=4 a3=3e8 items=0 ppid=5198 pid=11806 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634633.363:254): proctitle=737368643A20726F636B79205B707269765D type=USER_ROLE_CHANGE msg=audit(1744634633.364:255): pid=11806 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_START msg=audit(1744634633.375:256): pid=11806 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634633.376:257): pid=11809 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=11809 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=CRED_ACQ msg=audit(1744634633.377:258): pid=11809 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_LOGIN msg=audit(1744634633.425:259): pid=11806 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634633.425:260): pid=11806 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634633.426:261): pid=11806 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=11810 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634633.471:262): pid=11806 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634633.471:263): pid=11806 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634633.471:264): pid=11806 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11809 suid=1000 rport=57866 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634633.473:265): pid=11806 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=11809 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634633.474:266): pid=11806 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=CRED_DISP msg=audit(1744634633.474:267): pid=11806 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634633.475:268): pid=11806 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=11806 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=CRYPTO_KEY_USER msg=audit(1744634633.492:269): pid=11825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=11825 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1744634633.492:270): pid=11824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=11825 suid=74 rport=57870 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1744634633.492:271): pid=11824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=11825 suid=74 rport=57870 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1744634633.569:272): pid=11824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744634633.569:273): pid=11824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1744634633.606:274): pid=11824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744634633.606:275): pid=11824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11825 suid=74 rport=57870 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1744634633.608:276): pid=11824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1744634633.608:277): pid=11824 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=9 res=1UID="root" OLD-AUID="unset" AUID="rocky" type=SYSCALL msg=audit(1744634633.608:277): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffef9bba480 a2=4 a3=3e8 items=0 ppid=5198 pid=11824 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634633.608:277): proctitle=737368643A20726F636B79205B707269765D type=USER_ROLE_CHANGE msg=audit(1744634633.609:278): pid=11824 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_START msg=audit(1744634633.619:279): pid=11824 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634633.620:280): pid=11827 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=11827 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=CRED_ACQ msg=audit(1744634633.621:281): pid=11827 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_LOGIN msg=audit(1744634633.666:282): pid=11824 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634633.666:283): pid=11824 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634633.668:284): pid=11824 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=11828 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744634633.722:285): pid=11841 uid=1000 auid=1000 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744634633.722:286): pid=11841 uid=1000 auid=1000 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=726D202D66202F6574632F79756D2E7265706F732E642F726F636B792D6164646F6E732E7265706F202F6574632F79756D2E7265706F732E642F726F636B792D646576656C2E7265706F202F6574632F79756D2E7265706F732E642F726F636B792D6578747261732E7265706F202F6574632F79756D2E7265706F732E642F726F636B792E7265706F exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744634633.723:287): pid=11841 uid=1000 auid=1000 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744634633.724:288): pid=11841 uid=1000 auid=1000 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634633.726:289): pid=11841 uid=1000 auid=1000 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744634633.727:290): pid=11841 uid=1000 auid=1000 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_ACCT msg=audit(1744634633.763:291): pid=11828 uid=1000 auid=1000 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744634633.763:292): pid=11828 uid=1000 auid=1000 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=6370206D6972726F722D626173652D726F636B79392E7265706F202F6574632F79756D2E7265706F732E642F exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744634633.763:293): pid=11828 uid=1000 auid=1000 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744634633.765:294): pid=11828 uid=1000 auid=1000 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634633.768:295): pid=11828 uid=1000 auid=1000 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744634633.768:296): pid=11828 uid=1000 auid=1000 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634633.771:297): pid=11824 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634633.771:298): pid=11824 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634633.771:299): pid=11824 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11827 suid=1000 rport=57870 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634633.771:300): pid=11824 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=11827 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634633.773:301): pid=11824 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=CRED_DISP msg=audit(1744634633.773:302): pid=11824 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634633.773:303): pid=11824 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=11824 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=CRYPTO_KEY_USER msg=audit(1744634633.791:304): pid=11847 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=11847 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1744634633.792:305): pid=11846 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=11847 suid=74 rport=57876 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1744634633.792:306): pid=11846 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=11847 suid=74 rport=57876 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1744634633.863:307): pid=11846 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744634633.863:308): pid=11846 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1744634633.896:309): pid=11846 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744634633.897:310): pid=11846 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11847 suid=74 rport=57876 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1744634633.899:311): pid=11846 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1744634633.899:312): pid=11846 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=10 res=1UID="root" OLD-AUID="unset" AUID="rocky" type=SYSCALL msg=audit(1744634633.899:312): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffd2629d450 a2=4 a3=3e8 items=0 ppid=5198 pid=11846 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634633.899:312): proctitle=737368643A20726F636B79205B707269765D type=USER_ROLE_CHANGE msg=audit(1744634633.901:313): pid=11846 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_START msg=audit(1744634633.909:314): pid=11846 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634633.910:315): pid=11849 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=11849 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=CRED_ACQ msg=audit(1744634633.911:316): pid=11849 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_LOGIN msg=audit(1744634633.958:317): pid=11846 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634633.958:318): pid=11846 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634633.959:319): pid=11846 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=11850 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634634.003:320): pid=11846 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11849 suid=1000 rport=57876 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634634.005:321): pid=11846 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=11849 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634634.006:322): pid=11846 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=CRED_DISP msg=audit(1744634634.006:323): pid=11846 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_END msg=audit(1744634634.006:324): pid=11846 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634634.006:325): pid=11846 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634634.006:326): pid=11846 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=11846 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=CRYPTO_KEY_USER msg=audit(1744634634.021:327): pid=11865 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=11865 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1744634634.022:328): pid=11864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=11865 suid=74 rport=57878 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1744634634.022:329): pid=11864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=11865 suid=74 rport=57878 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1744634634.092:330): pid=11864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744634634.092:331): pid=11864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1744634634.129:332): pid=11864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744634634.129:333): pid=11864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11865 suid=74 rport=57878 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1744634634.130:334): pid=11864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1744634634.131:335): pid=11864 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=11 res=1UID="root" OLD-AUID="unset" AUID="rocky" type=SYSCALL msg=audit(1744634634.131:335): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffd5457e010 a2=4 a3=3e8 items=0 ppid=5198 pid=11864 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634634.131:335): proctitle=737368643A20726F636B79205B707269765D type=USER_ROLE_CHANGE msg=audit(1744634634.132:336): pid=11864 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_START msg=audit(1744634634.146:337): pid=11864 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634634.148:338): pid=11867 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=11867 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=CRED_ACQ msg=audit(1744634634.150:339): pid=11867 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_LOGIN msg=audit(1744634634.195:340): pid=11864 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634634.195:341): pid=11864 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634634.196:342): pid=11864 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=11868 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744634634.255:343): pid=11868 uid=1000 auid=1000 ses=11 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744634634.255:344): pid=11868 uid=1000 auid=1000 ses=11 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=6370206D6972726F722D6570656C392E7265706F202F6574632F79756D2E7265706F732E642F exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744634634.256:345): pid=11868 uid=1000 auid=1000 ses=11 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744634634.258:346): pid=11868 uid=1000 auid=1000 ses=11 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634634.262:347): pid=11868 uid=1000 auid=1000 ses=11 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744634634.262:348): pid=11868 uid=1000 auid=1000 ses=11 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634634.265:349): pid=11864 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634634.265:350): pid=11864 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634634.265:351): pid=11864 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11867 suid=1000 rport=57878 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634634.265:352): pid=11864 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=11867 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634634.267:353): pid=11864 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=CRED_DISP msg=audit(1744634634.267:354): pid=11864 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634634.267:355): pid=11864 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=11864 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=CRYPTO_KEY_USER msg=audit(1744634634.284:356): pid=11884 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=11884 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1744634634.285:357): pid=11883 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=11884 suid=74 rport=57880 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1744634634.285:358): pid=11883 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=11884 suid=74 rport=57880 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1744634634.353:359): pid=11883 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744634634.354:360): pid=11883 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1744634634.389:361): pid=11883 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744634634.389:362): pid=11883 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11884 suid=74 rport=57880 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1744634634.390:363): pid=11883 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1744634634.390:364): pid=11883 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=12 res=1UID="root" OLD-AUID="unset" AUID="rocky" type=SYSCALL msg=audit(1744634634.390:364): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7fff615a3050 a2=4 a3=3e8 items=0 ppid=5198 pid=11883 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634634.390:364): proctitle=737368643A20726F636B79205B707269765D type=USER_ROLE_CHANGE msg=audit(1744634634.391:365): pid=11883 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_START msg=audit(1744634634.401:366): pid=11883 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634634.402:367): pid=11886 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=11886 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=CRED_ACQ msg=audit(1744634634.402:368): pid=11886 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_LOGIN msg=audit(1744634634.452:369): pid=11883 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634634.452:370): pid=11883 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634634.453:371): pid=11883 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=11887 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744634634.516:372): pid=11887 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744634634.516:373): pid=11887 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=6D6F6470726F62652069705F7461626C6573 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744634634.517:374): pid=11887 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744634634.519:375): pid=11887 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634634.534:376): pid=11887 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744634634.535:377): pid=11887 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634634.538:378): pid=11883 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11886 suid=1000 rport=57880 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634634.539:379): pid=11883 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=11886 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634634.540:380): pid=11883 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=CRED_DISP msg=audit(1744634634.541:381): pid=11883 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_END msg=audit(1744634634.541:382): pid=11883 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634634.541:383): pid=11883 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634634.542:384): pid=11883 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=11883 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=CRYPTO_KEY_USER msg=audit(1744634634.558:385): pid=11904 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=11904 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1744634634.558:386): pid=11902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=11904 suid=74 rport=57882 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1744634634.558:387): pid=11902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=11904 suid=74 rport=57882 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1744634634.633:388): pid=11902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744634634.633:389): pid=11902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1744634634.671:390): pid=11902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744634634.671:391): pid=11902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11904 suid=74 rport=57882 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1744634634.673:392): pid=11902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1744634634.673:393): pid=11902 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=13 res=1UID="root" OLD-AUID="unset" AUID="rocky" type=SYSCALL msg=audit(1744634634.673:393): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffdc7af1d60 a2=4 a3=3e8 items=0 ppid=5198 pid=11902 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634634.673:393): proctitle=737368643A20726F636B79205B707269765D type=USER_ROLE_CHANGE msg=audit(1744634634.674:394): pid=11902 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_START msg=audit(1744634634.685:395): pid=11902 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634634.686:396): pid=11906 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=11906 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=CRED_ACQ msg=audit(1744634634.688:397): pid=11906 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_LOGIN msg=audit(1744634634.733:398): pid=11902 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634634.733:399): pid=11902 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634634.735:400): pid=11902 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=11907 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744634634.790:401): pid=11907 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744634634.790:402): pid=11907 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=646E6620696E7374616C6C202D79206F70656E7373682D736572766572206F70656E73736C exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744634634.791:403): pid=11907 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744634634.792:404): pid=11907 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=SERVICE_START msg=audit(1744634652.141:405): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r234dada11eaf4a65b288fde41753a7bc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1744634652.320:406): prog-id=36 op=LOAD type=BPF msg=audit(1744634652.320:407): prog-id=37 op=LOAD type=BPF msg=audit(1744634652.320:408): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634652.320:409): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634652.322:410): prog-id=38 op=LOAD type=BPF msg=audit(1744634652.322:411): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634652.324:412): prog-id=39 op=LOAD type=BPF msg=audit(1744634652.324:413): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634652.324:414): prog-id=40 op=LOAD type=BPF msg=audit(1744634652.324:415): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634652.324:416): prog-id=41 op=LOAD type=BPF msg=audit(1744634652.324:417): prog-id=42 op=LOAD type=BPF msg=audit(1744634652.325:418): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634652.325:419): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634652.326:420): prog-id=43 op=LOAD type=BPF msg=audit(1744634652.326:421): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634652.326:422): prog-id=44 op=LOAD type=BPF msg=audit(1744634652.326:423): prog-id=45 op=LOAD type=BPF msg=audit(1744634652.326:424): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634652.326:425): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634652.327:426): prog-id=46 op=LOAD type=BPF msg=audit(1744634652.327:427): prog-id=47 op=LOAD type=BPF msg=audit(1744634652.327:428): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634652.327:429): prog-id=0 op=UNLOAD type=CRYPTO_KEY_USER msg=audit(1744634652.341:430): pid=5198 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=5198 suid=0 exe=2F7573722F7362696E2F73736864202864656C6574656429 hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=SERVICE_STOP msg=audit(1744634652.343:431): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1744634652.356:432): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1744634652.376:433): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r39241a8879a94e258383cdeef8144841 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SOFTWARE_UPDATE msg=audit(1744634652.380:434): pid=11921 uid=0 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="openssl-libs-1:3.2.2-6.el9_5.1.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" type=SOFTWARE_UPDATE msg=audit(1744634652.380:435): pid=11921 uid=0 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="openssh-8.7p1-43.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" type=SOFTWARE_UPDATE msg=audit(1744634652.380:436): pid=11921 uid=0 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="openssh-clients-8.7p1-43.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" type=SOFTWARE_UPDATE msg=audit(1744634652.380:437): pid=11921 uid=0 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="openssh-server-8.7p1-43.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" type=SOFTWARE_UPDATE msg=audit(1744634652.380:438): pid=11921 uid=0 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="openssl-1:3.2.2-6.el9_5.1.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" type=USER_END msg=audit(1744634652.918:439): pid=11907 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744634652.918:440): pid=11907 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634652.920:441): pid=11902 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634652.920:442): pid=11902 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634652.920:443): pid=11902 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11906 suid=1000 rport=57882 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634652.920:444): pid=11902 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=11906 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634652.922:445): pid=11902 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=CRED_DISP msg=audit(1744634652.922:446): pid=11902 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634652.923:447): pid=11902 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=11902 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=CRYPTO_KEY_USER msg=audit(1744634652.939:448): pid=13330 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=13330 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1744634652.941:449): pid=13329 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=13330 suid=74 rport=58022 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1744634652.941:450): pid=13329 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=13330 suid=74 rport=58022 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1744634653.005:451): pid=13329 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744634653.005:452): pid=13329 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1744634653.039:453): pid=13329 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744634653.039:454): pid=13329 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13330 suid=74 rport=58022 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1744634653.041:455): pid=13329 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1744634653.041:456): pid=13329 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=14 res=1UID="root" OLD-AUID="unset" AUID="rocky" type=SYSCALL msg=audit(1744634653.041:456): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffd2bc06400 a2=4 a3=3e8 items=0 ppid=12346 pid=13329 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634653.041:456): proctitle=737368643A20726F636B79205B707269765D type=USER_ROLE_CHANGE msg=audit(1744634653.043:457): pid=13329 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=SERVICE_START msg=audit(1744634653.044:458): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1744634653.044:459): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1744634653.066:460): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r234dada11eaf4a65b288fde41753a7bc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1744634653.067:461): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r39241a8879a94e258383cdeef8144841 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1744634653.081:462): pid=13329 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634653.082:463): pid=13333 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=13333 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=CRED_ACQ msg=audit(1744634653.083:464): pid=13333 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_LOGIN msg=audit(1744634653.129:465): pid=13329 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634653.129:466): pid=13329 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634653.130:467): pid=13329 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=13334 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634653.204:468): pid=13329 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13333 suid=1000 rport=58022 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634653.205:469): pid=13329 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=13333 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634653.206:470): pid=13329 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=CRED_DISP msg=audit(1744634653.206:471): pid=13329 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_END msg=audit(1744634653.207:472): pid=13329 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634653.207:473): pid=13329 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634653.207:474): pid=13329 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=13329 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=CRYPTO_KEY_USER msg=audit(1744634653.225:475): pid=13353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=13353 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1744634653.225:476): pid=13352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=13353 suid=74 rport=58024 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1744634653.225:477): pid=13352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=13353 suid=74 rport=58024 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1744634653.288:478): pid=13352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744634653.288:479): pid=13352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1744634653.322:480): pid=13352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744634653.322:481): pid=13352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13353 suid=74 rport=58024 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1744634653.324:482): pid=13352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1744634653.324:483): pid=13352 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=15 res=1UID="root" OLD-AUID="unset" AUID="rocky" type=SYSCALL msg=audit(1744634653.324:483): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffc01f26100 a2=4 a3=3e8 items=0 ppid=12346 pid=13352 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634653.324:483): proctitle=737368643A20726F636B79205B707269765D type=USER_ROLE_CHANGE msg=audit(1744634653.325:484): pid=13352 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_START msg=audit(1744634653.334:485): pid=13352 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634653.335:486): pid=13355 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=13355 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=CRED_ACQ msg=audit(1744634653.336:487): pid=13355 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_LOGIN msg=audit(1744634653.381:488): pid=13352 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634653.381:489): pid=13352 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634653.382:490): pid=13352 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=13356 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634653.399:491): pid=13352 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13355 suid=1000 rport=58024 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634653.400:492): pid=13352 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=13355 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634653.401:493): pid=13352 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=CRED_DISP msg=audit(1744634653.401:494): pid=13352 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_END msg=audit(1744634653.402:495): pid=13352 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634653.402:496): pid=13352 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634653.402:497): pid=13352 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=13352 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=SERVICE_STOP msg=audit(1744634662.567:498): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1744634662.604:499): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634662.604:500): prog-id=0 op=UNLOAD type=SERVICE_STOP msg=audit(1744634663.629:501): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1744634663.640:502): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744634663.997:503): pid=13373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=13373 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1744634663.998:504): pid=13372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=13373 suid=74 rport=58122 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1744634663.998:505): pid=13372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=13373 suid=74 rport=58122 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1744634664.058:506): pid=13372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744634664.058:507): pid=13372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1744634664.096:508): pid=13372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744634664.096:509): pid=13372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13373 suid=74 rport=58122 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1744634664.098:510): pid=13372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1744634664.098:511): pid=13372 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=16 res=1UID="root" OLD-AUID="unset" AUID="rocky" type=SYSCALL msg=audit(1744634664.098:511): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffe13140190 a2=4 a3=3e8 items=0 ppid=12346 pid=13372 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634664.098:511): proctitle=737368643A20726F636B79205B707269765D type=USER_ROLE_CHANGE msg=audit(1744634664.099:512): pid=13372 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=SERVICE_START msg=audit(1744634664.116:513): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1744634664.151:514): pid=13376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRED_ACQ msg=audit(1744634664.152:515): pid=13376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="rocky" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=USER_ROLE_CHANGE msg=audit(1744634664.152:516): pid=13376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1744634664.153:517): pid=13376 uid=0 subj=system_u:system_r:init_t:s0 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=17 res=1UID="root" OLD-AUID="unset" AUID="rocky" type=SYSCALL msg=audit(1744634664.153:517): arch=c000003e syscall=1 success=yes exit=4 a0=7 a1=7ffe2f7afdf0 a2=4 a3=3e8 items=0 ppid=1 pid=13376 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="(systemd)" exe="/usr/lib/systemd/systemd" subj=system_u:system_r:init_t:s0 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634664.153:517): proctitle="(systemd)" type=USER_START msg=audit(1744634664.155:518): pid=13376 uid=0 auid=1000 ses=17 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="rocky" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" type=SERVICE_START msg=audit(1744634664.241:519): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1744634664.247:520): pid=13372 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634664.248:521): pid=13385 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=13385 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=CRED_ACQ msg=audit(1744634664.249:522): pid=13385 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_LOGIN msg=audit(1744634664.293:523): pid=13372 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634664.294:524): pid=13372 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634664.295:525): pid=13372 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=13386 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634664.314:526): pid=13372 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13385 suid=1000 rport=58122 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634664.314:527): pid=13372 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=13385 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634664.315:528): pid=13372 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=CRED_DISP msg=audit(1744634664.315:529): pid=13372 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_END msg=audit(1744634664.316:530): pid=13372 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634664.316:531): pid=13372 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634664.316:532): pid=13372 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=13372 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=CRYPTO_KEY_USER msg=audit(1744634664.334:533): pid=13401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=13401 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1744634664.335:534): pid=13400 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=13401 suid=74 rport=58126 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1744634664.335:535): pid=13400 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=13401 suid=74 rport=58126 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1744634664.395:536): pid=13400 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744634664.395:537): pid=13400 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1744634664.428:538): pid=13400 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744634664.428:539): pid=13400 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13401 suid=74 rport=58126 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1744634664.430:540): pid=13400 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1744634664.430:541): pid=13400 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=18 res=1UID="root" OLD-AUID="unset" AUID="rocky" type=SYSCALL msg=audit(1744634664.430:541): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffdeb1a76c0 a2=4 a3=3e8 items=0 ppid=12346 pid=13400 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634664.430:541): proctitle=737368643A20726F636B79205B707269765D type=USER_ROLE_CHANGE msg=audit(1744634664.431:542): pid=13400 uid=0 auid=1000 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_START msg=audit(1744634664.441:543): pid=13400 uid=0 auid=1000 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634664.442:544): pid=13403 uid=0 auid=1000 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=13403 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=CRED_ACQ msg=audit(1744634664.443:545): pid=13403 uid=0 auid=1000 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_LOGIN msg=audit(1744634664.486:546): pid=13400 uid=0 auid=1000 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634664.486:547): pid=13400 uid=0 auid=1000 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634664.487:548): pid=13400 uid=0 auid=1000 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=13404 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634664.509:549): pid=13400 uid=0 auid=1000 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634664.509:550): pid=13400 uid=0 auid=1000 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634664.509:551): pid=13400 uid=0 auid=1000 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13403 suid=1000 rport=58126 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634664.510:552): pid=13400 uid=0 auid=1000 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=13403 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634664.511:553): pid=13400 uid=0 auid=1000 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=CRED_DISP msg=audit(1744634664.511:554): pid=13400 uid=0 auid=1000 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634664.512:555): pid=13400 uid=0 auid=1000 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=13400 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=CRYPTO_KEY_USER msg=audit(1744634665.545:556): pid=13418 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=13418 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1744634665.546:557): pid=13417 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=13418 suid=74 rport=58130 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1744634665.546:558): pid=13417 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=13418 suid=74 rport=58130 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1744634665.605:559): pid=13417 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744634665.605:560): pid=13417 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1744634665.641:561): pid=13417 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744634665.641:562): pid=13417 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13418 suid=74 rport=58130 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1744634665.643:563): pid=13417 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1744634665.643:564): pid=13417 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=19 res=1UID="root" OLD-AUID="unset" AUID="rocky" type=SYSCALL msg=audit(1744634665.643:564): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffff7a5ccb0 a2=4 a3=3e8 items=0 ppid=12346 pid=13417 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634665.643:564): proctitle=737368643A20726F636B79205B707269765D type=USER_ROLE_CHANGE msg=audit(1744634665.644:565): pid=13417 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_START msg=audit(1744634665.656:566): pid=13417 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634665.657:567): pid=13420 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=13420 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=CRED_ACQ msg=audit(1744634665.658:568): pid=13420 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_LOGIN msg=audit(1744634665.702:569): pid=13417 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634665.702:570): pid=13417 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634665.703:571): pid=13417 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=13421 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634665.727:572): pid=13417 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634665.727:573): pid=13417 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634665.727:574): pid=13417 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13420 suid=1000 rport=58130 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634665.727:575): pid=13417 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=13420 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634665.728:576): pid=13417 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=CRED_DISP msg=audit(1744634665.728:577): pid=13417 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634665.729:578): pid=13417 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=13417 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=CRYPTO_KEY_USER msg=audit(1744634665.743:579): pid=13435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=13435 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1744634665.744:580): pid=13434 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=13435 suid=74 rport=58140 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1744634665.744:581): pid=13434 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=13435 suid=74 rport=58140 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1744634665.803:582): pid=13434 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744634665.803:583): pid=13434 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1744634665.835:584): pid=13434 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744634665.836:585): pid=13434 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13435 suid=74 rport=58140 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1744634665.837:586): pid=13434 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1744634665.837:587): pid=13434 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=20 res=1UID="root" OLD-AUID="unset" AUID="rocky" type=SYSCALL msg=audit(1744634665.837:587): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffee5929000 a2=4 a3=3e8 items=0 ppid=12346 pid=13434 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634665.837:587): proctitle=737368643A20726F636B79205B707269765D type=USER_ROLE_CHANGE msg=audit(1744634665.838:588): pid=13434 uid=0 auid=1000 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_START msg=audit(1744634665.846:589): pid=13434 uid=0 auid=1000 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634665.847:590): pid=13437 uid=0 auid=1000 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=13437 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=CRED_ACQ msg=audit(1744634665.848:591): pid=13437 uid=0 auid=1000 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_LOGIN msg=audit(1744634665.890:592): pid=13434 uid=0 auid=1000 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634665.890:593): pid=13434 uid=0 auid=1000 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634665.891:594): pid=13434 uid=0 auid=1000 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=13438 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634665.910:595): pid=13434 uid=0 auid=1000 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634665.910:596): pid=13434 uid=0 auid=1000 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634665.910:597): pid=13434 uid=0 auid=1000 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13437 suid=1000 rport=58140 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634665.911:598): pid=13434 uid=0 auid=1000 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=13437 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634665.912:599): pid=13434 uid=0 auid=1000 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=CRED_DISP msg=audit(1744634665.912:600): pid=13434 uid=0 auid=1000 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634665.913:601): pid=13434 uid=0 auid=1000 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=13434 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=CRYPTO_KEY_USER msg=audit(1744634665.934:602): pid=13454 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=13454 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1744634665.935:603): pid=13453 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=13454 suid=74 rport=58146 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1744634665.935:604): pid=13453 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=13454 suid=74 rport=58146 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1744634665.994:605): pid=13453 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744634665.994:606): pid=13453 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1744634666.029:607): pid=13453 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744634666.029:608): pid=13453 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13454 suid=74 rport=58146 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1744634666.031:609): pid=13453 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1744634666.031:610): pid=13453 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=21 res=1UID="root" OLD-AUID="unset" AUID="rocky" type=SYSCALL msg=audit(1744634666.031:610): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7fffbfd16b50 a2=4 a3=3e8 items=0 ppid=12346 pid=13453 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634666.031:610): proctitle=737368643A20726F636B79205B707269765D type=USER_ROLE_CHANGE msg=audit(1744634666.032:611): pid=13453 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_START msg=audit(1744634666.041:612): pid=13453 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634666.042:613): pid=13456 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=13456 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=CRED_ACQ msg=audit(1744634666.043:614): pid=13456 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_LOGIN msg=audit(1744634666.086:615): pid=13453 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634666.086:616): pid=13453 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634666.087:617): pid=13453 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=13457 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634666.105:618): pid=13453 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634666.105:619): pid=13453 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634666.105:620): pid=13453 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13456 suid=1000 rport=58146 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634666.105:621): pid=13453 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=13456 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634666.106:622): pid=13453 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=CRED_DISP msg=audit(1744634666.107:623): pid=13453 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634666.107:624): pid=13453 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=13453 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=CRYPTO_KEY_USER msg=audit(1744634666.126:625): pid=13471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=13471 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1744634666.126:626): pid=13470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=13471 suid=74 rport=58148 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1744634666.126:627): pid=13470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=13471 suid=74 rport=58148 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1744634666.186:628): pid=13470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744634666.186:629): pid=13470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1744634666.218:630): pid=13470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744634666.218:631): pid=13470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13471 suid=74 rport=58148 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1744634666.219:632): pid=13470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1744634666.220:633): pid=13470 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=22 res=1UID="root" OLD-AUID="unset" AUID="rocky" type=SYSCALL msg=audit(1744634666.220:633): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffda5ec57a0 a2=4 a3=3e8 items=0 ppid=12346 pid=13470 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634666.220:633): proctitle=737368643A20726F636B79205B707269765D type=USER_ROLE_CHANGE msg=audit(1744634666.220:634): pid=13470 uid=0 auid=1000 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_START msg=audit(1744634666.229:635): pid=13470 uid=0 auid=1000 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634666.230:636): pid=13473 uid=0 auid=1000 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=13473 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=CRED_ACQ msg=audit(1744634666.231:637): pid=13473 uid=0 auid=1000 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_LOGIN msg=audit(1744634666.274:638): pid=13470 uid=0 auid=1000 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634666.274:639): pid=13470 uid=0 auid=1000 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634666.275:640): pid=13470 uid=0 auid=1000 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=13474 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744634666.327:641): pid=13474 uid=1000 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744634666.327:642): pid=13474 uid=1000 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=62617368202D63207072696E746620225C6E31302E302E302E333820202020636E2D6A656E6B696E732D6465706C6F792D706C6174666F726D2D616E7369626C652D6B38732D3332322D315C6E22203E3E202F6574632F686F737473 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744634666.327:643): pid=13474 uid=1000 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744634666.330:644): pid=13474 uid=1000 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634666.332:645): pid=13474 uid=1000 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744634666.333:646): pid=13474 uid=1000 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634666.334:647): pid=13470 uid=0 auid=1000 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634666.334:648): pid=13470 uid=0 auid=1000 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634666.334:649): pid=13470 uid=0 auid=1000 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13473 suid=1000 rport=58148 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634666.334:650): pid=13470 uid=0 auid=1000 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=13473 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634666.336:651): pid=13470 uid=0 auid=1000 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=CRED_DISP msg=audit(1744634666.336:652): pid=13470 uid=0 auid=1000 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634666.336:653): pid=13470 uid=0 auid=1000 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=13470 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=CRYPTO_KEY_USER msg=audit(1744634667.078:654): pid=13490 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=13490 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1744634667.079:655): pid=13489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=13490 suid=74 rport=58158 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1744634667.079:656): pid=13489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=13490 suid=74 rport=58158 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1744634667.140:657): pid=13489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744634667.140:658): pid=13489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1744634667.172:659): pid=13489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744634667.172:660): pid=13489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13490 suid=74 rport=58158 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1744634667.173:661): pid=13489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1744634667.173:662): pid=13489 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=23 res=1UID="root" OLD-AUID="unset" AUID="rocky" type=SYSCALL msg=audit(1744634667.173:662): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffd3afddbf0 a2=4 a3=3e8 items=0 ppid=12346 pid=13489 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634667.173:662): proctitle=737368643A20726F636B79205B707269765D type=USER_ROLE_CHANGE msg=audit(1744634667.174:663): pid=13489 uid=0 auid=1000 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_START msg=audit(1744634667.184:664): pid=13489 uid=0 auid=1000 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634667.185:665): pid=13492 uid=0 auid=1000 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=13492 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=CRED_ACQ msg=audit(1744634667.186:666): pid=13492 uid=0 auid=1000 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_LOGIN msg=audit(1744634667.230:667): pid=13489 uid=0 auid=1000 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634667.230:668): pid=13489 uid=0 auid=1000 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634667.231:669): pid=13489 uid=0 auid=1000 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=13493 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634667.417:670): pid=13489 uid=0 auid=1000 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13492 suid=1000 rport=58158 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634667.417:671): pid=13489 uid=0 auid=1000 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=13492 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634667.418:672): pid=13489 uid=0 auid=1000 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=CRED_DISP msg=audit(1744634667.419:673): pid=13489 uid=0 auid=1000 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_END msg=audit(1744634667.419:674): pid=13489 uid=0 auid=1000 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634667.419:675): pid=13489 uid=0 auid=1000 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634667.419:676): pid=13489 uid=0 auid=1000 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=13489 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=CRYPTO_KEY_USER msg=audit(1744634667.437:677): pid=13508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=13508 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1744634667.438:678): pid=13507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=13508 suid=74 rport=58160 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1744634667.438:679): pid=13507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=13508 suid=74 rport=58160 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1744634667.498:680): pid=13507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744634667.498:681): pid=13507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1744634667.532:682): pid=13507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744634667.532:683): pid=13507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13508 suid=74 rport=58160 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1744634667.534:684): pid=13507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1744634667.534:685): pid=13507 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=24 res=1UID="root" OLD-AUID="unset" AUID="rocky" type=SYSCALL msg=audit(1744634667.534:685): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffc5325c030 a2=4 a3=3e8 items=0 ppid=12346 pid=13507 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634667.534:685): proctitle=737368643A20726F636B79205B707269765D type=USER_ROLE_CHANGE msg=audit(1744634667.535:686): pid=13507 uid=0 auid=1000 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_START msg=audit(1744634667.543:687): pid=13507 uid=0 auid=1000 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634667.544:688): pid=13510 uid=0 auid=1000 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=13510 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=CRED_ACQ msg=audit(1744634667.545:689): pid=13510 uid=0 auid=1000 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_LOGIN msg=audit(1744634667.590:690): pid=13507 uid=0 auid=1000 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634667.590:691): pid=13507 uid=0 auid=1000 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634667.592:692): pid=13507 uid=0 auid=1000 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=13511 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744634667.710:693): pid=13582 uid=1000 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744634667.711:694): pid=13582 uid=1000 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=646E6620636865636B2D757064617465 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744634667.711:695): pid=13582 uid=1000 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744634667.713:696): pid=13582 uid=1000 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634668.297:697): pid=13582 uid=1000 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744634668.297:698): pid=13582 uid=1000 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_ACCT msg=audit(1744634668.332:699): pid=13585 uid=1000 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744634668.332:700): pid=13585 uid=1000 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=646E6620696E7374616C6C202D79206375726C20707974686F6E3320707974686F6E332D7365747570746F6F6C73206C696273656C696E75782D707974686F6E33206970726F757465206A712062696E642D7574696C7320707974686F6E332D706970206F70656E7373682D736572766572206F70656E7373682D636C69656E747320707974686F6E332D7669727475616C656E76 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744634668.332:701): pid=13585 uid=1000 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744634668.335:702): pid=13585 uid=1000 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=SERVICE_STOP msg=audit(1744634671.905:703): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=crond comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1744634671.907:704): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=crond comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=MAC_POLICY_LOAD msg=audit(1744634675.948:705): auid=1000 ses=24 lsm=selinux res=1AUID="rocky" type=SYSCALL msg=audit(1744634675.948:705): arch=c000003e syscall=1 success=yes exit=3511466 a0=4 a1=7f30d2e00000 a2=3594aa a3=0 items=0 ppid=13605 pid=13609 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:unconfined_r:load_policy_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634675.948:705): proctitle="/sbin/load_policy" type=SERVICE_START msg=audit(1744634677.302:706): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r44fa17e2134d46c188f30eb348d8ea79 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1744634677.487:707): prog-id=48 op=LOAD type=BPF msg=audit(1744634677.487:708): prog-id=49 op=LOAD type=BPF msg=audit(1744634677.487:709): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634677.487:710): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634677.489:711): prog-id=50 op=LOAD type=BPF msg=audit(1744634677.489:712): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634677.491:713): prog-id=51 op=LOAD type=BPF msg=audit(1744634677.491:714): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634677.492:715): prog-id=52 op=LOAD type=BPF msg=audit(1744634677.492:716): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634677.492:717): prog-id=53 op=LOAD type=BPF msg=audit(1744634677.492:718): prog-id=54 op=LOAD type=BPF msg=audit(1744634677.492:719): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634677.492:720): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634677.494:721): prog-id=55 op=LOAD type=BPF msg=audit(1744634677.494:722): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634677.494:723): prog-id=56 op=LOAD type=BPF msg=audit(1744634677.494:724): prog-id=57 op=LOAD type=BPF msg=audit(1744634677.494:725): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634677.494:726): prog-id=0 op=UNLOAD type=SERVICE_START msg=audit(1744634677.527:727): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r120fe242264f4381bb8ef6348259a58c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SOFTWARE_UPDATE msg=audit(1744634677.544:728): pid=13587 uid=0 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="python3-libs-3.9.21-1.el9_5.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe=2F7573722F62696E2F707974686F6E332E39202864656C6574656429 hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" type=SOFTWARE_UPDATE msg=audit(1744634677.544:729): pid=13587 uid=0 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="python-unversioned-command-3.9.21-1.el9_5.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe=2F7573722F62696E2F707974686F6E332E39202864656C6574656429 hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" type=SOFTWARE_UPDATE msg=audit(1744634677.544:730): pid=13587 uid=0 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="python3-3.9.21-1.el9_5.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe=2F7573722F62696E2F707974686F6E332E39202864656C6574656429 hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" type=SOFTWARE_UPDATE msg=audit(1744634677.544:731): pid=13587 uid=0 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="bind-license-32:9.16.23-24.el9_5.3.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe=2F7573722F62696E2F707974686F6E332E39202864656C6574656429 hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" type=SOFTWARE_UPDATE msg=audit(1744634677.544:732): pid=13587 uid=0 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="bind-libs-32:9.16.23-24.el9_5.3.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe=2F7573722F62696E2F707974686F6E332E39202864656C6574656429 hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" type=SOFTWARE_UPDATE msg=audit(1744634677.544:733): pid=13587 uid=0 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="bind-utils-32:9.16.23-24.el9_5.3.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe=2F7573722F62696E2F707974686F6E332E39202864656C6574656429 hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" type=SOFTWARE_UPDATE msg=audit(1744634677.544:734): pid=13587 uid=0 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="libsepol-3.6-1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe=2F7573722F62696E2F707974686F6E332E39202864656C6574656429 hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" type=SOFTWARE_UPDATE msg=audit(1744634677.544:735): pid=13587 uid=0 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="libselinux-3.6-1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe=2F7573722F62696E2F707974686F6E332E39202864656C6574656429 hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" type=SOFTWARE_UPDATE msg=audit(1744634677.544:736): pid=13587 uid=0 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="iproute-6.2.0-6.el9_4.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe=2F7573722F62696E2F707974686F6E332E39202864656C6574656429 hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" type=SOFTWARE_UPDATE msg=audit(1744634677.544:737): pid=13587 uid=0 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="libselinux-utils-3.6-1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe=2F7573722F62696E2F707974686F6E332E39202864656C6574656429 hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" type=SOFTWARE_UPDATE msg=audit(1744634677.544:738): pid=13587 uid=0 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="bind-dnssec-doc-32:9.16.23-24.el9_5.3.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe=2F7573722F62696E2F707974686F6E332E39202864656C6574656429 hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" type=SOFTWARE_UPDATE msg=audit(1744634677.544:739): pid=13587 uid=0 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="python3-bind-32:9.16.23-24.el9_5.3.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe=2F7573722F62696E2F707974686F6E332E39202864656C6574656429 hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" type=SOFTWARE_UPDATE msg=audit(1744634677.544:740): pid=13587 uid=0 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="bind-dnssec-utils-32:9.16.23-24.el9_5.3.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe=2F7573722F62696E2F707974686F6E332E39202864656C6574656429 hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" type=SOFTWARE_UPDATE msg=audit(1744634677.544:741): pid=13587 uid=0 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-distlib-0.3.2-1.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="dnf" exe=2F7573722F62696E2F707974686F6E332E39202864656C6574656429 hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" type=SOFTWARE_UPDATE msg=audit(1744634677.544:742): pid=13587 uid=0 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-filelock-3.7.1-1.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="dnf" exe=2F7573722F62696E2F707974686F6E332E39202864656C6574656429 hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" type=SOFTWARE_UPDATE msg=audit(1744634677.544:743): pid=13587 uid=0 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-platformdirs-2.5.4-1.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="dnf" exe=2F7573722F62696E2F707974686F6E332E39202864656C6574656429 hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" type=SOFTWARE_UPDATE msg=audit(1744634677.544:744): pid=13587 uid=0 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="python3-setuptools-53.0.0-13.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe=2F7573722F62696E2F707974686F6E332E39202864656C6574656429 hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" type=SOFTWARE_UPDATE msg=audit(1744634677.544:745): pid=13587 uid=0 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="libcurl-7.76.1-31.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe=2F7573722F62696E2F707974686F6E332E39202864656C6574656429 hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" type=SOFTWARE_UPDATE msg=audit(1744634677.544:746): pid=13587 uid=0 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-wheel-wheel-1:0.36.2-8.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe=2F7573722F62696E2F707974686F6E332E39202864656C6574656429 hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" type=SOFTWARE_UPDATE msg=audit(1744634677.544:747): pid=13587 uid=0 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="oniguruma-6.9.6-1.el9.6.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe=2F7573722F62696E2F707974686F6E332E39202864656C6574656429 hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" type=SOFTWARE_UPDATE msg=audit(1744634677.544:748): pid=13587 uid=0 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="jq-1.6-17.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe=2F7573722F62696E2F707974686F6E332E39202864656C6574656429 hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" type=SOFTWARE_UPDATE msg=audit(1744634677.544:749): pid=13587 uid=0 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-virtualenv-20.21.1-14.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="dnf" exe=2F7573722F62696E2F707974686F6E332E39202864656C6574656429 hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" type=SOFTWARE_UPDATE msg=audit(1744634677.544:750): pid=13587 uid=0 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="curl-7.76.1-31.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe=2F7573722F62696E2F707974686F6E332E39202864656C6574656429 hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" type=SOFTWARE_UPDATE msg=audit(1744634677.544:751): pid=13587 uid=0 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-pip-21.3.1-1.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe=2F7573722F62696E2F707974686F6E332E39202864656C6574656429 hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" type=SOFTWARE_UPDATE msg=audit(1744634677.544:752): pid=13587 uid=0 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="bind-32:9.16.23-24.el9_5.3.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe=2F7573722F62696E2F707974686F6E332E39202864656C6574656429 hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" type=SOFTWARE_UPDATE msg=audit(1744634677.545:753): pid=13587 uid=0 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="iproute-tc-6.2.0-6.el9_4.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe=2F7573722F62696E2F707974686F6E332E39202864656C6574656429 hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" type=SOFTWARE_UPDATE msg=audit(1744634677.545:754): pid=13587 uid=0 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="python3-libselinux-3.6-1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe=2F7573722F62696E2F707974686F6E332E39202864656C6574656429 hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" type=USER_END msg=audit(1744634678.091:755): pid=13585 uid=1000 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744634678.091:756): pid=13585 uid=1000 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=SERVICE_START msg=audit(1744634678.304:757): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1744634678.304:758): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1744634678.326:759): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r44fa17e2134d46c188f30eb348d8ea79 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1744634678.327:760): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r120fe242264f4381bb8ef6348259a58c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1744634812.253:761): pid=15001 uid=1000 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744634812.253:762): pid=15001 uid=1000 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=726D202D7266202F686F6D652F726F636B792F74662D616E7369626C652D6465706C6F796572 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744634812.254:763): pid=15001 uid=1000 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744634812.257:764): pid=15001 uid=1000 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634812.259:765): pid=15001 uid=1000 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744634812.259:766): pid=15001 uid=1000 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634823.933:767): pid=15289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=15289 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1744634823.934:768): pid=15288 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=15289 suid=74 rport=46008 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1744634823.934:769): pid=15288 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=15289 suid=74 rport=46008 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1744634824.087:770): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sssd-kcm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_AUTH msg=audit(1744634824.134:771): pid=15288 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744634824.134:772): pid=15288 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:70:6d:53:7b:b9:b1:0c:0b:97:46:57:0a:90:24:61:0d:60:dd:24:ba:9a:35:b7:5d:bd:60:94:bc:89:4a:f4:2f exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1744634824.168:773): pid=15288 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744634824.168:774): pid=15288 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15289 suid=74 rport=46008 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1744634824.170:775): pid=15288 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1744634824.170:776): pid=15288 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=25 res=1UID="root" OLD-AUID="unset" AUID="rocky" type=SYSCALL msg=audit(1744634824.170:776): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7fff4f78c8c0 a2=4 a3=3e8 items=0 ppid=12346 pid=15288 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634824.170:776): proctitle=737368643A20726F636B79205B707269765D type=USER_ROLE_CHANGE msg=audit(1744634824.171:777): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_START msg=audit(1744634824.184:778): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634824.185:779): pid=15296 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=15296 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=CRED_ACQ msg=audit(1744634824.187:780): pid=15296 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_LOGIN msg=audit(1744634824.229:781): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634824.229:782): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634824.231:783): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=15297 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634824.249:784): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634824.249:785): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634824.261:786): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634824.261:787): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634824.262:788): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=15311 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634824.284:789): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634824.284:790): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634824.295:791): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634824.295:792): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634824.296:793): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=15331 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634824.315:794): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634824.315:795): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634824.325:796): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634824.325:797): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634824.326:798): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=15347 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634824.375:799): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634824.375:800): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634824.391:801): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634824.391:802): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634824.392:803): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=15363 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634824.429:804): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634824.429:805): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634824.440:806): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634824.440:807): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634824.440:808): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=15377 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634824.459:809): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634824.459:810): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634824.470:811): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634824.470:812): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634824.471:813): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=15392 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744634824.528:814): pid=15407 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744634824.528:815): pid=15407 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7068627873766F7871646773627574617569687169746B62726C636171776C6F203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633343832342E3235323433392D31353238362D33353531343533303939333930362F416E736962616C6C5A5F73657475702E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744634824.529:816): pid=15407 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744634824.531:817): pid=15407 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634825.115:818): pid=15407 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744634825.115:819): pid=15407 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634825.118:820): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634825.118:821): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634825.131:822): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634825.132:823): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634825.132:824): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=15440 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634825.151:825): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634825.151:826): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634825.412:827): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634825.412:828): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634825.413:829): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=15459 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634825.430:830): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634825.430:831): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634825.441:832): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634825.441:833): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634825.442:834): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=15473 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634825.464:835): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634825.464:836): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634825.480:837): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634825.480:838): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634825.481:839): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=15494 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634825.513:840): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634825.513:841): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634825.525:842): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634825.525:843): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634825.527:844): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=15508 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634825.546:845): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634825.547:846): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634825.558:847): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634825.558:848): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634825.559:849): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=15523 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744634825.617:850): pid=15538 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744634825.617:851): pid=15538 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B676E6368666D7268787166677377737075686D75776E696A6A74626A727479203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633343832352E343333313734312D31353435372D31373237323335303139373330322F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744634825.618:852): pid=15538 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744634825.619:853): pid=15538 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634826.050:854): pid=15538 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744634826.050:855): pid=15538 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634826.053:856): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634826.053:857): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634826.065:858): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634826.066:859): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634826.067:860): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=15543 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634826.086:861): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634826.086:862): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634827.114:863): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634827.114:864): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634827.115:865): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=15576 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634827.133:866): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634827.133:867): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634827.143:868): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634827.143:869): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634827.144:870): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=15590 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634827.165:871): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634827.165:872): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634827.184:873): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634827.184:874): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634827.185:875): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=15611 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634827.216:876): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634827.216:877): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634827.227:878): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634827.227:879): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634827.228:880): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=15625 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634827.246:881): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634827.246:882): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634827.256:883): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634827.256:884): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634827.257:885): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=15640 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744634827.308:886): pid=15655 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744634827.309:887): pid=15655 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D676A676C616A7474787A7A616979686872657073736769697476706574636566203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633343832372E313336313037342D31353537342D3233333735393839393732313431362F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744634827.309:888): pid=15655 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744634827.311:889): pid=15655 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634827.479:890): pid=15655 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744634827.479:891): pid=15655 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634827.482:892): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634827.482:893): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634827.493:894): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634827.493:895): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634827.494:896): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=15661 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634827.515:897): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634827.515:898): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634827.708:899): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634827.708:900): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634827.709:901): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=15678 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634827.726:902): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634827.726:903): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634827.736:904): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634827.736:905): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634827.737:906): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=15692 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634827.760:907): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634827.760:908): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634828.098:909): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634828.098:910): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634828.099:911): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=15713 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634828.137:912): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634828.137:913): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634828.148:914): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634828.148:915): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634828.149:916): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=15727 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634828.168:917): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634828.168:918): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634828.180:919): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634828.180:920): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634828.181:921): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=15742 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744634828.239:922): pid=15757 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744634828.239:923): pid=15757 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E6B737A6F646475726971686F7474636875676764706C6978706B717A686275203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633343832372E3732383137392D31353637362D3233353834323738353630343532382F416E736962616C6C5A5F73797374656D642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744634828.240:924): pid=15757 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744634828.241:925): pid=15757 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=BPF msg=audit(1744634828.734:926): prog-id=58 op=LOAD type=BPF msg=audit(1744634828.734:927): prog-id=59 op=LOAD type=BPF msg=audit(1744634828.734:928): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634828.734:929): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634828.736:930): prog-id=60 op=LOAD type=BPF msg=audit(1744634828.736:931): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634828.738:932): prog-id=61 op=LOAD type=BPF msg=audit(1744634828.738:933): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634828.738:934): prog-id=62 op=LOAD type=BPF msg=audit(1744634828.738:935): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634828.738:936): prog-id=63 op=LOAD type=BPF msg=audit(1744634828.738:937): prog-id=64 op=LOAD type=BPF msg=audit(1744634828.738:938): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634828.738:939): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634828.740:940): prog-id=65 op=LOAD type=BPF msg=audit(1744634828.740:941): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634828.740:942): prog-id=66 op=LOAD type=BPF msg=audit(1744634828.740:943): prog-id=67 op=LOAD type=BPF msg=audit(1744634828.740:944): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634828.740:945): prog-id=0 op=UNLOAD type=SERVICE_STOP msg=audit(1744634828.755:946): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cloud-config comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1744634828.778:947): pid=15757 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744634828.778:948): pid=15757 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634828.781:949): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634828.782:950): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634828.794:951): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634828.794:952): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634828.795:953): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=15795 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634828.816:954): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634828.816:955): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634828.872:956): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634828.872:957): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634828.873:958): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=15811 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634828.895:959): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634828.895:960): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634828.906:961): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634828.906:962): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634828.907:963): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=15825 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634828.932:964): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634828.932:965): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634828.951:966): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634828.951:967): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634828.952:968): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=15846 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634828.993:969): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634828.993:970): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634829.004:971): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634829.004:972): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634829.005:973): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=15860 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634829.025:974): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634829.025:975): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634829.038:976): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634829.038:977): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634829.039:978): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=15875 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744634829.092:979): pid=15890 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744634829.092:980): pid=15890 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E61657876697262616E64736276737677646575676C7A6E75776661746A7866203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633343832382E383937353630382D31353637362D39363834363132373232393036372F416E736962616C6C5A5F73797374656D642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744634829.092:981): pid=15890 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744634829.095:982): pid=15890 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=BPF msg=audit(1744634829.532:983): prog-id=68 op=LOAD type=BPF msg=audit(1744634829.532:984): prog-id=69 op=LOAD type=BPF msg=audit(1744634829.532:985): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634829.532:986): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634829.534:987): prog-id=70 op=LOAD type=BPF msg=audit(1744634829.534:988): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634829.535:989): prog-id=71 op=LOAD type=BPF msg=audit(1744634829.535:990): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634829.536:991): prog-id=72 op=LOAD type=BPF msg=audit(1744634829.536:992): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634829.536:993): prog-id=73 op=LOAD type=BPF msg=audit(1744634829.536:994): prog-id=74 op=LOAD type=BPF msg=audit(1744634829.536:995): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634829.536:996): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634829.538:997): prog-id=75 op=LOAD type=BPF msg=audit(1744634829.538:998): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634829.538:999): prog-id=76 op=LOAD type=BPF msg=audit(1744634829.538:1000): prog-id=77 op=LOAD type=BPF msg=audit(1744634829.538:1001): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634829.538:1002): prog-id=0 op=UNLOAD type=SERVICE_STOP msg=audit(1744634829.552:1003): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cloud-final comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1744634829.575:1004): pid=15890 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744634829.576:1005): pid=15890 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634829.578:1006): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634829.578:1007): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634829.590:1008): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634829.590:1009): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634829.591:1010): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=15928 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634829.611:1011): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634829.611:1012): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634829.652:1013): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634829.652:1014): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634829.653:1015): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=15943 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634829.671:1016): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634829.671:1017): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634829.682:1018): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634829.682:1019): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634829.683:1020): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=15957 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634829.705:1021): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634829.706:1022): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634829.722:1023): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634829.722:1024): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634829.723:1025): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=15978 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634829.762:1026): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634829.762:1027): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634829.774:1028): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634829.774:1029): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634829.775:1030): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=15992 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634829.796:1031): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634829.796:1032): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634829.808:1033): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634829.808:1034): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634829.809:1035): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=16007 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744634829.867:1036): pid=16022 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744634829.867:1037): pid=16022 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D757A6E7A6A7474796E676E6572636A786F7578726567676B6A796F65786D6D7A203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633343832392E363733303035332D31353637362D313233323631383433333230382F416E736962616C6C5A5F73797374656D642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744634829.868:1038): pid=16022 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744634829.870:1039): pid=16022 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=BPF msg=audit(1744634830.381:1040): prog-id=78 op=LOAD type=BPF msg=audit(1744634830.381:1041): prog-id=79 op=LOAD type=BPF msg=audit(1744634830.381:1042): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634830.381:1043): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634830.383:1044): prog-id=80 op=LOAD type=BPF msg=audit(1744634830.383:1045): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634830.385:1046): prog-id=81 op=LOAD type=BPF msg=audit(1744634830.385:1047): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634830.385:1048): prog-id=82 op=LOAD type=BPF msg=audit(1744634830.385:1049): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634830.385:1050): prog-id=83 op=LOAD type=BPF msg=audit(1744634830.385:1051): prog-id=84 op=LOAD type=BPF msg=audit(1744634830.385:1052): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634830.385:1053): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634830.387:1054): prog-id=85 op=LOAD type=BPF msg=audit(1744634830.387:1055): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634830.387:1056): prog-id=86 op=LOAD type=BPF msg=audit(1744634830.387:1057): prog-id=87 op=LOAD type=BPF msg=audit(1744634830.387:1058): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634830.387:1059): prog-id=0 op=UNLOAD type=SERVICE_STOP msg=audit(1744634830.401:1060): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cloud-init-local comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1744634830.427:1061): pid=16022 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744634830.427:1062): pid=16022 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634830.430:1063): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634830.430:1064): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634830.446:1065): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634830.446:1066): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634830.447:1067): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=16060 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634830.467:1068): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634830.467:1069): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634830.509:1070): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634830.509:1071): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634830.510:1072): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=16075 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634830.529:1073): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634830.529:1074): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634830.540:1075): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634830.541:1076): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634830.542:1077): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=16089 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634830.565:1078): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634830.565:1079): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634830.581:1080): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634830.581:1081): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634830.582:1082): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=16110 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634830.623:1083): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634830.623:1084): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634830.637:1085): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634830.637:1086): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634830.638:1087): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=16124 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634830.659:1088): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634830.659:1089): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634830.672:1090): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634830.672:1091): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634830.673:1092): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=16139 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744634830.727:1093): pid=16154 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744634830.727:1094): pid=16154 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C7671736C786E616E62646471756D6865646D74657A61736D6A6A6F73726272203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633343833302E353331323139322D31353637362D34313737313537323731343934302F416E736962616C6C5A5F73797374656D642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744634830.728:1095): pid=16154 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744634830.731:1096): pid=16154 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=BPF msg=audit(1744634831.202:1097): prog-id=88 op=LOAD type=BPF msg=audit(1744634831.203:1098): prog-id=89 op=LOAD type=BPF msg=audit(1744634831.203:1099): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634831.203:1100): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634831.204:1101): prog-id=90 op=LOAD type=BPF msg=audit(1744634831.204:1102): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634831.206:1103): prog-id=91 op=LOAD type=BPF msg=audit(1744634831.206:1104): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634831.206:1105): prog-id=92 op=LOAD type=BPF msg=audit(1744634831.207:1106): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634831.207:1107): prog-id=93 op=LOAD type=BPF msg=audit(1744634831.207:1108): prog-id=94 op=LOAD type=BPF msg=audit(1744634831.207:1109): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634831.207:1110): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634831.208:1111): prog-id=95 op=LOAD type=BPF msg=audit(1744634831.208:1112): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634831.208:1113): prog-id=96 op=LOAD type=BPF msg=audit(1744634831.208:1114): prog-id=97 op=LOAD type=BPF msg=audit(1744634831.208:1115): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634831.208:1116): prog-id=0 op=UNLOAD type=SERVICE_STOP msg=audit(1744634831.221:1117): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cloud-init comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1744634831.242:1118): pid=16154 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744634831.242:1119): pid=16154 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634831.245:1120): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634831.245:1121): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634831.258:1122): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634831.258:1123): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634831.259:1124): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=16192 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634831.281:1125): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634831.281:1126): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634831.331:1127): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634831.331:1128): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634831.333:1129): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=16207 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634831.352:1130): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634831.352:1131): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634831.364:1132): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634831.364:1133): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634831.365:1134): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=16221 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634831.387:1135): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634831.387:1136): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634831.404:1137): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634831.404:1138): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634831.405:1139): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=16242 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634831.447:1140): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634831.447:1141): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634831.458:1142): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634831.459:1143): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634831.459:1144): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=16256 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634831.479:1145): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634831.479:1146): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634831.489:1147): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634831.489:1148): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634831.490:1149): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=16271 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744634831.543:1150): pid=16286 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744634831.543:1151): pid=16286 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6276766C716D6971777A7873757A697A767167656272666A6E7171757777766F203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633343833312E333534353633322D31353637362D38373931303637333032313334392F416E736962616C6C5A5F73797374656D642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744634831.544:1152): pid=16286 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744634831.545:1153): pid=16286 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634831.859:1154): pid=16286 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744634831.859:1155): pid=16286 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634831.862:1156): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634831.862:1157): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634831.873:1158): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634831.873:1159): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634831.874:1160): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=16292 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634831.893:1161): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634831.893:1162): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634832.141:1163): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634832.141:1164): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634832.142:1165): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=16310 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634832.160:1166): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634832.160:1167): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634832.171:1168): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634832.171:1169): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634832.172:1170): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=16324 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634832.195:1171): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634832.195:1172): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634832.514:1173): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634832.514:1174): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634832.515:1175): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=16345 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634832.554:1176): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634832.554:1177): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634832.565:1178): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634832.565:1179): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634832.566:1180): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=16359 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634832.585:1181): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634832.585:1182): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634832.595:1183): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634832.595:1184): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634832.597:1185): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=16374 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744634832.648:1186): pid=16389 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744634832.648:1187): pid=16389 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D77736F767173646A696E666C796D746B776F6E6E6D786A74796468666E697372203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633343833322E313632323637322D31363330382D3134343531383033393738323232392F416E736962616C6C5A5F73656C696E75782E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744634832.649:1188): pid=16389 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744634832.651:1189): pid=16389 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=MAC_STATUS msg=audit(1744634832.912:1190): enforcing=0 old_enforcing=1 auid=1000 ses=25 enabled=1 old-enabled=1 lsm=selinux res=1AUID="rocky" type=SYSCALL msg=audit(1744634832.912:1190): arch=c000003e syscall=1 success=yes exit=1 a0=4 a1=7ffcff4edc30 a2=1 a3=0 items=0 ppid=16389 pid=16391 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=25 comm="python3.9" exe="/usr/bin/python3.9" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634832.912:1190): proctitle=2F7573722F62696E2F707974686F6E332E39002F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633343833322E313632323637322D31363330382D3134343531383033393738323232392F416E736962616C6C5A5F73656C696E75782E7079 type=USER_END msg=audit(1744634832.938:1191): pid=16389 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744634832.938:1192): pid=16389 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634832.941:1193): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634832.941:1194): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634832.956:1195): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634832.956:1196): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634832.958:1197): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=16393 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634832.984:1198): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634832.984:1199): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634833.890:1200): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634833.890:1201): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634833.891:1202): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=16426 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634833.913:1203): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634833.913:1204): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634833.923:1205): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634833.923:1206): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634833.924:1207): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=16440 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634833.952:1208): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634833.952:1209): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634834.081:1210): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634834.081:1211): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634834.082:1212): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=16461 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634834.112:1213): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634834.112:1214): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634834.123:1215): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634834.123:1216): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634834.124:1217): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=16475 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634834.143:1218): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634834.143:1219): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634834.155:1220): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634834.155:1221): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634834.156:1222): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=16490 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744634834.208:1223): pid=16505 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744634834.208:1224): pid=16505 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7366626176786F76767565707268747A786E756572626764736A73627979776F203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633343833332E393134363035312D31363432342D31313534373534373131353936392F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744634834.208:1225): pid=16505 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744634834.210:1226): pid=16505 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634834.370:1227): pid=16505 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744634834.370:1228): pid=16505 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634834.373:1229): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634834.373:1230): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634834.387:1231): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634834.387:1232): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634834.388:1233): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=16509 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634834.408:1234): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634834.408:1235): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634834.825:1236): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634834.825:1237): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634834.826:1238): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=16530 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634834.846:1239): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634834.846:1240): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634834.859:1241): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634834.859:1242): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634834.860:1243): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=16544 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634834.886:1244): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634834.886:1245): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634834.903:1246): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634834.903:1247): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634834.904:1248): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=16565 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634834.933:1249): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634834.933:1250): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634834.945:1251): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634834.945:1252): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634834.946:1253): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=16579 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634834.965:1254): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634834.965:1255): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634834.977:1256): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634834.977:1257): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634834.978:1258): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=16594 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744634835.032:1259): pid=16609 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744634835.033:1260): pid=16609 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6363676B6378707067666E6B667A71726C697061787669646B727A7561737270203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633343833342E383438323832362D31363532382D38313132313932303034383233312F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744634835.033:1261): pid=16609 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744634835.035:1262): pid=16609 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634835.221:1263): pid=16609 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744634835.221:1264): pid=16609 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634835.224:1265): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634835.224:1266): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634835.234:1267): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634835.234:1268): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634835.235:1269): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=16615 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634835.254:1270): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634835.254:1271): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634835.824:1272): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634835.824:1273): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634835.825:1274): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=16650 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634835.843:1275): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634835.843:1276): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634835.853:1277): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634835.853:1278): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634835.854:1279): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=16664 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634835.881:1280): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634835.881:1281): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634836.079:1282): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634836.079:1283): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634836.080:1284): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=16685 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634836.113:1285): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634836.113:1286): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634836.125:1287): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634836.125:1288): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634836.126:1289): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=16699 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634836.149:1290): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634836.149:1291): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634836.163:1292): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634836.163:1293): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634836.164:1294): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=16714 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744634836.217:1295): pid=16729 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744634836.217:1296): pid=16729 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D62687773636E666D6B69646964796970776A6B786A6E6979666B6E7A72666270203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633343833352E3834353135352D31363634382D3134363930303933313531303539342F416E736962616C6C5A5F646E662E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744634836.217:1297): pid=16729 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744634836.218:1298): pid=16729 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=BPF msg=audit(1744634837.685:1299): prog-id=98 op=LOAD type=BPF msg=audit(1744634837.685:1300): prog-id=99 op=LOAD type=BPF msg=audit(1744634837.685:1301): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634837.685:1302): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634837.687:1303): prog-id=100 op=LOAD type=BPF msg=audit(1744634837.687:1304): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634837.688:1305): prog-id=101 op=LOAD type=BPF msg=audit(1744634837.688:1306): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634837.689:1307): prog-id=102 op=LOAD type=BPF msg=audit(1744634837.689:1308): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634837.689:1309): prog-id=103 op=LOAD type=BPF msg=audit(1744634837.689:1310): prog-id=104 op=LOAD type=BPF msg=audit(1744634837.689:1311): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634837.689:1312): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634837.691:1313): prog-id=105 op=LOAD type=BPF msg=audit(1744634837.691:1314): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634837.691:1315): prog-id=106 op=LOAD type=BPF msg=audit(1744634837.691:1316): prog-id=107 op=LOAD type=BPF msg=audit(1744634837.691:1317): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634837.691:1318): prog-id=0 op=UNLOAD type=SERVICE_START msg=audit(1744634837.712:1319): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-rf0866ec7e5af43ef9b576033d4748068 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SOFTWARE_UPDATE msg=audit(1744634837.731:1320): pid=16731 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=remove sw="cloud-init-22.1-9.el9.0.2.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-322-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky" type=SOFTWARE_UPDATE msg=audit(1744634837.731:1321): pid=16731 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=remove sw="cockpit-system-286.1-1.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-322-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky" type=SOFTWARE_UPDATE msg=audit(1744634837.731:1322): pid=16731 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=remove sw="sos-4.5.1-3.el9_2.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-322-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky" type=SOFTWARE_UPDATE msg=audit(1744634837.732:1323): pid=16731 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=remove sw="nfs-utils-1:2.5.4-18.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-322-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky" type=SOFTWARE_UPDATE msg=audit(1744634837.732:1324): pid=16731 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=remove sw="python3-pyyaml-5.4.1-6.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-322-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky" type=USER_END msg=audit(1744634838.266:1325): pid=16729 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744634838.267:1326): pid=16729 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634838.270:1327): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634838.270:1328): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634838.281:1329): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634838.281:1330): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634838.283:1331): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=17021 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634838.304:1332): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634838.304:1333): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=SERVICE_START msg=audit(1744634838.328:1334): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1744634838.328:1335): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1744634838.340:1336): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-rf0866ec7e5af43ef9b576033d4748068 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1744634838.479:1337): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634838.479:1338): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634838.480:1339): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=17039 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634838.501:1340): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634838.501:1341): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634838.512:1342): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634838.512:1343): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634838.513:1344): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=17053 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634838.537:1345): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634838.537:1346): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634838.554:1347): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634838.555:1348): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634838.555:1349): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=17074 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634838.584:1350): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634838.584:1351): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634838.596:1352): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634838.596:1353): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634838.597:1354): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=17088 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634838.617:1355): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634838.617:1356): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634838.628:1357): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634838.628:1358): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634838.629:1359): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=17103 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744634838.681:1360): pid=17118 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744634838.682:1361): pid=17118 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7073716D72756977637776666E7876697366786A6C666F756D6B637A687A7671203B2068747470735F70726F78793D272720687474705F70726F78793D2727205049505F425245414B5F53595354454D5F5041434B414745533D31202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633343833382E3530333530312D31373033372D3130373137393838323434323036382F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744634838.682:1362): pid=17118 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744634838.684:1363): pid=17118 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634839.652:1364): pid=17118 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744634839.652:1365): pid=17118 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634839.654:1366): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634839.655:1367): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634839.665:1368): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634839.665:1369): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634839.666:1370): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=17125 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634839.686:1371): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634839.686:1372): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634839.874:1373): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634839.874:1374): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634839.875:1375): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=17142 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634839.892:1376): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634839.892:1377): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634839.903:1378): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634839.903:1379): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634839.904:1380): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=17156 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634839.925:1381): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634839.925:1382): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634839.939:1383): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634839.939:1384): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634839.940:1385): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=17177 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634839.968:1386): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634839.968:1387): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634839.979:1388): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634839.979:1389): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634839.980:1390): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=17191 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634839.998:1391): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634839.998:1392): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634840.010:1393): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634840.010:1394): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634840.011:1395): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=17206 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744634840.070:1396): pid=17221 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744634840.070:1397): pid=17221 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6674767166626F6871746B71647572767368627472726C78626A687079646564203B2068747470735F70726F78793D272720687474705F70726F78793D2727205049505F425245414B5F53595354454D5F5041434B414745533D31202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633343833392E383934343431382D31373134302D3134333837323535393639313333392F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744634840.070:1398): pid=17221 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744634840.072:1399): pid=17221 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634845.566:1400): pid=17221 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744634845.566:1401): pid=17221 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634845.569:1402): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634845.569:1403): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634845.579:1404): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634845.579:1405): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634845.580:1406): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=17232 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634845.599:1407): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634845.599:1408): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634846.282:1409): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634846.282:1410): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634846.283:1411): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=17263 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634846.300:1412): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634846.300:1413): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634846.310:1414): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634846.310:1415): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634846.311:1416): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=17277 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634846.333:1417): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634846.333:1418): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634846.459:1419): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634846.459:1420): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634846.459:1421): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=17298 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634846.487:1422): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634846.487:1423): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634846.498:1424): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634846.498:1425): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634846.499:1426): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=17312 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634846.517:1427): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634846.517:1428): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634846.527:1429): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634846.527:1430): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634846.528:1431): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=17327 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744634846.579:1432): pid=17342 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744634846.579:1433): pid=17342 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7374646E6D666279786B69796368696D787A65706567757A686D646D72676C64203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633343834362E333032343734332D31373236312D39323137353636303439353835392F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744634846.580:1434): pid=17342 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744634846.582:1435): pid=17342 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634846.743:1436): pid=17342 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744634846.743:1437): pid=17342 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634846.746:1438): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634846.746:1439): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634846.756:1440): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634846.756:1441): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634846.757:1442): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=17346 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634846.775:1443): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634846.775:1444): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634847.293:1445): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634847.293:1446): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634847.294:1447): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=17375 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634847.313:1448): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634847.313:1449): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634847.324:1450): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634847.324:1451): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634847.324:1452): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=17389 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634847.346:1453): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634847.347:1454): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634847.486:1455): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634847.486:1456): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634847.487:1457): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=17410 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634847.520:1458): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634847.521:1459): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634847.531:1460): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634847.532:1461): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634847.533:1462): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=17424 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634847.554:1463): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634847.554:1464): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634847.566:1465): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634847.567:1466): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634847.567:1467): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=17439 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744634847.617:1468): pid=17454 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744634847.617:1469): pid=17454 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7374787974796564657277637A7774767A77716D6C6A7A666C706D7A71666D67203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633343834372E333134393539352D31373337332D32363832343734343330363531392F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744634847.618:1470): pid=17454 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744634847.620:1471): pid=17454 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634847.783:1472): pid=17454 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744634847.783:1473): pid=17454 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634847.786:1474): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634847.786:1475): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634847.796:1476): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634847.796:1477): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634847.797:1478): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=17458 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634847.815:1479): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634847.815:1480): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634847.989:1481): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634847.989:1482): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634847.990:1483): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=17475 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634848.010:1484): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634848.010:1485): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634848.020:1486): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634848.020:1487): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634848.022:1488): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=17489 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634848.045:1489): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634848.045:1490): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634848.155:1491): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634848.155:1492): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634848.156:1493): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=17510 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634848.184:1494): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634848.184:1495): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634848.195:1496): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634848.195:1497): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634848.196:1498): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=17524 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634848.215:1499): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634848.215:1500): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634848.225:1501): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634848.225:1502): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634848.226:1503): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=17539 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744634848.281:1504): pid=17554 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744634848.282:1505): pid=17554 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D726573726F7968686E636F716B6F6A766B77787566756E6C7A77766367736973203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633343834382E303132343432342D31373437332D38313335373230393939323631372F416E736962616C6C5A5F6D6F6470726F62652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744634848.282:1506): pid=17554 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744634848.283:1507): pid=17554 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634848.501:1508): pid=17554 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744634848.501:1509): pid=17554 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634848.504:1510): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634848.504:1511): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634848.514:1512): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634848.514:1513): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634848.515:1514): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=17562 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634848.533:1515): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634848.533:1516): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634848.685:1517): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634848.685:1518): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634848.686:1519): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=17579 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634848.704:1520): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634848.704:1521): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634848.714:1522): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634848.714:1523): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634848.715:1524): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=17593 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634848.737:1525): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634848.737:1526): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634848.752:1527): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634848.752:1528): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634848.753:1529): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=17614 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634848.781:1530): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634848.781:1531): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634848.793:1532): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634848.793:1533): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634848.794:1534): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=17628 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634848.813:1535): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634848.813:1536): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634848.824:1537): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634848.824:1538): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634848.825:1539): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=17643 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744634848.877:1540): pid=17658 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744634848.877:1541): pid=17658 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7362776F656D6B69726B636A7264776A697A706D73686F74707564766A756376203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633343834382E373036333736382D31373537372D31353837323836363237373434372F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744634848.877:1542): pid=17658 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744634848.879:1543): pid=17658 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634849.044:1544): pid=17658 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744634849.045:1545): pid=17658 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634849.047:1546): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634849.047:1547): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634849.058:1548): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634849.058:1549): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634849.059:1550): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=17664 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634849.077:1551): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634849.077:1552): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634849.248:1553): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634849.248:1554): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634849.249:1555): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=17681 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634849.267:1556): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634849.267:1557): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634849.282:1558): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634849.282:1559): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634849.283:1560): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=17695 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634849.304:1561): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634849.304:1562): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634849.320:1563): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634849.320:1564): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634849.321:1565): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=17716 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634849.350:1566): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634849.350:1567): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634849.361:1568): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634849.361:1569): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634849.362:1570): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=17730 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634849.382:1571): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634849.382:1572): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634849.394:1573): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634849.394:1574): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634849.395:1575): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=17745 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744634849.448:1576): pid=17760 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744634849.448:1577): pid=17760 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6466646C6E7A656C706F626F6E61616C636D716B6F70637570616B7974766275203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633343834392E323639303733322D31373637392D3135343531343831373530323834382F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744634849.449:1578): pid=17760 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744634849.450:1579): pid=17760 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634849.611:1580): pid=17760 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744634849.611:1581): pid=17760 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634849.613:1582): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634849.613:1583): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634849.623:1584): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634849.623:1585): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634849.625:1586): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=17766 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634849.643:1587): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634849.643:1588): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634849.791:1589): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634849.791:1590): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634849.792:1591): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=17783 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634849.814:1592): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634849.814:1593): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634849.824:1594): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634849.824:1595): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634849.825:1596): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=17797 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634849.848:1597): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634849.848:1598): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634850.007:1599): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634850.007:1600): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634850.008:1601): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=17818 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634850.037:1602): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634850.037:1603): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634850.054:1604): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634850.055:1605): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634850.056:1606): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=17832 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634850.076:1607): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634850.076:1608): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634850.087:1609): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634850.087:1610): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634850.088:1611): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=17847 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744634850.141:1612): pid=17862 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744634850.141:1613): pid=17862 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F76646C796574687762676A666B637975706D646E696C776C74667763666B66203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633343834392E3831353732322D31373738312D3231333032353833343131323130382F416E736962616C6C5A5F73797363746C2E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744634850.141:1614): pid=17862 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744634850.143:1615): pid=17862 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634851.318:1616): pid=17862 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744634851.318:1617): pid=17862 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634851.320:1618): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634851.320:1619): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634851.330:1620): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634851.331:1621): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634851.331:1622): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=17869 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634851.349:1623): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634851.349:1624): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634851.496:1625): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634851.496:1626): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634851.497:1627): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=17886 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634851.517:1628): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634851.517:1629): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634851.528:1630): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634851.528:1631): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634851.529:1632): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=17900 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634851.550:1633): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634851.550:1634): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634851.567:1635): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634851.567:1636): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634851.568:1637): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=17921 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634851.595:1638): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634851.595:1639): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634851.605:1640): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634851.606:1641): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634851.606:1642): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=17935 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634851.624:1643): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634851.624:1644): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634851.634:1645): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634851.634:1646): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634851.635:1647): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=17950 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744634851.683:1648): pid=17965 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744634851.683:1649): pid=17965 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D78766364666168626D6261626B6574636F77646D79736A716B70666C6C717377203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633343835312E353138393735332D31373838342D393231353133383438373032382F416E736962616C6C5A5F73797363746C2E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744634851.684:1650): pid=17965 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744634851.685:1651): pid=17965 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634851.847:1652): pid=17965 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744634851.847:1653): pid=17965 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634851.849:1654): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634851.849:1655): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634851.859:1656): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634851.859:1657): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634851.860:1658): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=17972 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634851.880:1659): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634851.880:1660): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634852.032:1661): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634852.032:1662): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634852.033:1663): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=17989 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634852.052:1664): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634852.052:1665): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634852.064:1666): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634852.064:1667): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634852.065:1668): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=18003 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634852.087:1669): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634852.087:1670): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634852.103:1671): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634852.103:1672): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634852.104:1673): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=18024 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634852.133:1674): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634852.134:1675): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634852.146:1676): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634852.146:1677): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634852.147:1678): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=18038 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634852.167:1679): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634852.167:1680): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634852.178:1681): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634852.178:1682): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634852.179:1683): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=18053 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744634852.230:1684): pid=18068 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744634852.231:1685): pid=18068 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D72616C7A746C796F79626E6A6E6B71626E747475706F6871766F6D7471677674203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633343835322E3035343239312D31373938372D3236393738393737383133353233312F416E736962616C6C5A5F73797363746C2E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744634852.231:1686): pid=18068 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744634852.232:1687): pid=18068 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634852.404:1688): pid=18068 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744634852.404:1689): pid=18068 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634852.406:1690): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634852.406:1691): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634852.417:1692): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634852.417:1693): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634852.418:1694): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=18075 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634852.437:1695): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634852.437:1696): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634852.759:1697): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634852.759:1698): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634852.760:1699): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=18094 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634852.778:1700): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634852.778:1701): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634852.788:1702): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634852.788:1703): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634852.788:1704): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=18108 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634852.812:1705): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634852.813:1706): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634852.830:1707): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634852.830:1708): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634852.831:1709): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=18129 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634852.870:1710): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634852.870:1711): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634852.881:1712): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634852.881:1713): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634852.882:1714): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=18143 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634852.900:1715): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634852.900:1716): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634852.911:1717): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634852.911:1718): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634852.912:1719): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=18158 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744634852.964:1720): pid=18173 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744634852.964:1721): pid=18173 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F74756879776D706D71716A656D62647A77766E6675746B6862667765617162203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633343835322E373830313335362D31383039322D3131303134363532323336323539332F416E736962616C6C5A5F73797374656D642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744634852.965:1722): pid=18173 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744634852.966:1723): pid=18173 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634853.292:1724): pid=18173 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744634853.293:1725): pid=18173 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634853.294:1726): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634853.295:1727): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634853.306:1728): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634853.306:1729): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634853.307:1730): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=18178 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634853.325:1731): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634853.325:1732): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634853.488:1733): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634853.488:1734): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634853.489:1735): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=18195 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634853.508:1736): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634853.508:1737): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634853.518:1738): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634853.518:1739): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634853.519:1740): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=18209 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634853.540:1741): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634853.540:1742): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634853.554:1743): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634853.554:1744): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634853.555:1745): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=18230 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634853.583:1746): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634853.583:1747): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634853.593:1748): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634853.593:1749): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634853.594:1750): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=18244 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634853.612:1751): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634853.612:1752): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634853.622:1753): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634853.622:1754): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634853.623:1755): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=18259 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744634853.674:1756): pid=18274 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744634853.675:1757): pid=18274 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D667A76667A7979716273646F6366786D756963716F696F767A65617768686B72203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633343835332E353039363234352D31383139332D3232303136353735303234343435392F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744634853.675:1758): pid=18274 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744634853.677:1759): pid=18274 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634853.845:1760): pid=18274 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744634853.845:1761): pid=18274 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634853.848:1762): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634853.848:1763): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634853.861:1764): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634853.861:1765): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634853.862:1766): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=18279 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634853.883:1767): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634853.883:1768): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634854.038:1769): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634854.038:1770): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634854.039:1771): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=18296 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634854.058:1772): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634854.058:1773): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634854.070:1774): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634854.070:1775): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634854.071:1776): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=18310 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634854.093:1777): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634854.093:1778): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634854.108:1779): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634854.108:1780): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634854.109:1781): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=18331 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634854.138:1782): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634854.138:1783): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634854.148:1784): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634854.148:1785): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634854.149:1786): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=18345 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634854.169:1787): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634854.169:1788): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634854.179:1789): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634854.179:1790): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634854.180:1791): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=18360 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744634854.235:1792): pid=18375 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744634854.235:1793): pid=18375 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D66757874666D7370796C6B7174616771617465777275696A786F627764786B6D203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633343835342E303539383537342D31383239342D3134333231323233383935363739392F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744634854.236:1794): pid=18375 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744634854.237:1795): pid=18375 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634854.428:1796): pid=18375 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744634854.429:1797): pid=18375 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634854.430:1798): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634854.430:1799): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634854.440:1800): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634854.440:1801): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634854.441:1802): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=18380 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634854.462:1803): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634854.462:1804): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634854.839:1805): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634854.839:1806): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634854.840:1807): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=18401 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634854.857:1808): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634854.857:1809): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634854.867:1810): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634854.868:1811): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634854.868:1812): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=18415 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634854.891:1813): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634854.891:1814): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634854.908:1815): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634854.908:1816): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634854.909:1817): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=18436 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634854.938:1818): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634854.938:1819): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634854.949:1820): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634854.949:1821): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634854.950:1822): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=18450 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634854.970:1823): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634854.971:1824): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634854.984:1825): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634854.984:1826): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634854.985:1827): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=18465 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744634855.037:1828): pid=18480 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744634855.037:1829): pid=18480 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D69636865626561617A756661766E6F6B646D7368746D6874726F6B786A6E7875203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633343835342E383539323437342D31383339392D3235343138383232333334383336322F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744634855.037:1830): pid=18480 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744634855.039:1831): pid=18480 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634855.641:1832): pid=18480 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744634855.641:1833): pid=18480 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634855.643:1834): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634855.643:1835): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634855.655:1836): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634855.655:1837): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634855.656:1838): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=18489 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634855.675:1839): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634855.675:1840): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634855.871:1841): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634855.871:1842): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634855.872:1843): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=18506 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634855.889:1844): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634855.889:1845): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634855.899:1846): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634855.899:1847): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634855.900:1848): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=18520 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634855.921:1849): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634855.921:1850): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634855.936:1851): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634855.936:1852): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634855.937:1853): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=18541 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634855.968:1854): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634855.968:1855): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634855.978:1856): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634855.978:1857): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634855.979:1858): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=18555 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634855.997:1859): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634855.997:1860): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634856.008:1861): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634856.008:1862): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634856.009:1863): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=18570 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744634856.067:1864): pid=18585 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744634856.068:1865): pid=18585 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D76786B77726964736C6A6D6C736C706D6A6A68627A61787A77756C646D717872203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633343835352E383930393939332D31383530342D35303937333737383932363034342F416E736962616C6C5A5F646E662E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744634856.068:1866): pid=18585 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744634856.070:1867): pid=18585 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=MAC_CONFIG_CHANGE msg=audit(1744634864.050:1868): bool=virt_use_nfs val=1 old_val=0 auid=1000 ses=25AUID="rocky" type=SYSCALL msg=audit(1744634864.050:1868): arch=c000003e syscall=1 success=yes exit=2 a0=4 a1=7ffe81742d3e a2=2 a3=0 items=0 ppid=18633 pid=18634 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=25 comm="setsebool" exe="/usr/sbin/setsebool" subj=unconfined_u:unconfined_r:setsebool_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634864.050:1868): proctitle=2F7573722F7362696E2F7365747365626F6F6C002D50002D4E00766972745F7573655F6E66733D3100766972745F73616E64626F785F7573655F616C6C5F636170733D31 type=MAC_POLICY_LOAD msg=audit(1744634873.861:1869): auid=1000 ses=25 lsm=selinux res=1AUID="rocky" type=SYSCALL msg=audit(1744634873.861:1869): arch=c000003e syscall=1 success=yes exit=3537681 a0=4 a1=7fb41a400000 a2=35fb11 a3=0 items=0 ppid=18633 pid=18649 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=25 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:unconfined_r:load_policy_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634873.861:1869): proctitle="/usr/sbin/load_policy" type=ADD_GROUP msg=audit(1744634875.336:1870): pid=18658 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-group id=986 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" ID="docker" type=GRP_MGMT msg=audit(1744634875.345:1871): pid=18658 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-shadow-group id=986 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" ID="docker" type=SERVICE_START msg=audit(1744634887.530:1872): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-raf032b3ca97a42de81669622bd11e54e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1744634887.681:1873): prog-id=108 op=LOAD type=BPF msg=audit(1744634887.681:1874): prog-id=109 op=LOAD type=BPF msg=audit(1744634887.681:1875): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634887.681:1876): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634887.683:1877): prog-id=110 op=LOAD type=BPF msg=audit(1744634887.683:1878): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634887.685:1879): prog-id=111 op=LOAD type=BPF msg=audit(1744634887.685:1880): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634887.686:1881): prog-id=112 op=LOAD type=BPF msg=audit(1744634887.686:1882): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634887.686:1883): prog-id=113 op=LOAD type=BPF msg=audit(1744634887.686:1884): prog-id=114 op=LOAD type=BPF msg=audit(1744634887.686:1885): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634887.686:1886): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634887.688:1887): prog-id=115 op=LOAD type=BPF msg=audit(1744634887.688:1888): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634887.688:1889): prog-id=116 op=LOAD type=BPF msg=audit(1744634887.688:1890): prog-id=117 op=LOAD type=BPF msg=audit(1744634887.688:1891): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634887.688:1892): prog-id=0 op=UNLOAD type=SERVICE_START msg=audit(1744634887.721:1893): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r08ad25db031c4ed482a1d5f75b2e2435 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SOFTWARE_UPDATE msg=audit(1744634887.730:1894): pid=18587 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="docker-buildx-plugin-0:0.22.0-1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-322-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky" type=SOFTWARE_UPDATE msg=audit(1744634887.730:1895): pid=18587 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="docker-compose-plugin-0:2.34.0-1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-322-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky" type=SOFTWARE_UPDATE msg=audit(1744634887.730:1896): pid=18587 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="fuse3-libs-3.10.2-9.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-322-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky" type=SOFTWARE_UPDATE msg=audit(1744634887.730:1897): pid=18587 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="container-selinux-3:2.232.1-1.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-322-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky" type=SOFTWARE_UPDATE msg=audit(1744634887.730:1898): pid=18587 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="containerd.io-1.7.27-3.1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-322-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky" type=SOFTWARE_UPDATE msg=audit(1744634887.730:1899): pid=18587 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="docker-ce-cli-1:28.0.4-1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-322-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky" type=SOFTWARE_UPDATE msg=audit(1744634887.730:1900): pid=18587 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="iptables-libs-1.8.10-11.el9_5.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-322-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky" type=SOFTWARE_UPDATE msg=audit(1744634887.730:1901): pid=18587 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="iptables-legacy-libs-1.8.10-11.1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-322-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky" type=SOFTWARE_UPDATE msg=audit(1744634887.730:1902): pid=18587 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="iptables-legacy-1.8.10-11.1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-322-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky" type=SOFTWARE_UPDATE msg=audit(1744634887.730:1903): pid=18587 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libslirp-4.4.0-8.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-322-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky" type=SOFTWARE_UPDATE msg=audit(1744634887.730:1904): pid=18587 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="slirp4netns-1.3.1-1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-322-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky" type=SOFTWARE_UPDATE msg=audit(1744634887.730:1905): pid=18587 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="fuse-common-3.10.2-9.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-322-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky" type=SOFTWARE_UPDATE msg=audit(1744634887.730:1906): pid=18587 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="fuse3-3.10.2-9.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-322-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky" type=SOFTWARE_UPDATE msg=audit(1744634887.730:1907): pid=18587 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="fuse-overlayfs-1.14-1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-322-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky" type=SOFTWARE_UPDATE msg=audit(1744634887.730:1908): pid=18587 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="docker-ce-3:25.0.3-1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-322-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky" type=SOFTWARE_UPDATE msg=audit(1744634887.730:1909): pid=18587 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="docker-ce-rootless-extras-0:28.0.4-1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-322-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky" type=USER_END msg=audit(1744634888.978:1910): pid=18585 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744634888.978:1911): pid=18585 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634888.982:1912): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634888.982:1913): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=SERVICE_START msg=audit(1744634888.988:1914): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1744634888.988:1915): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1744634888.994:1916): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634888.994:1917): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634888.995:1918): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=20613 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634889.015:1919): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634889.015:1920): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=SERVICE_STOP msg=audit(1744634889.112:1921): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-raf032b3ca97a42de81669622bd11e54e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1744634889.112:1922): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r08ad25db031c4ed482a1d5f75b2e2435 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1744634889.342:1923): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634889.342:1924): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634889.343:1925): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=20634 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634889.366:1926): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634889.366:1927): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634889.376:1928): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634889.376:1929): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634889.377:1930): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=20648 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634889.399:1931): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634889.399:1932): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634889.414:1933): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634889.414:1934): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634889.415:1935): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=20669 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634889.445:1936): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634889.445:1937): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634889.456:1938): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634889.456:1939): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634889.457:1940): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=20683 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634889.475:1941): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634889.475:1942): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634889.489:1943): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634889.489:1944): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634889.490:1945): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=20698 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744634889.544:1946): pid=20713 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744634889.544:1947): pid=20713 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E7A766B73726D6278706C78707572746B6D6E6469616D626D676A757A756D6D203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633343838392E333637393233332D32303633322D3230373836323637303036353535322F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744634889.545:1948): pid=20713 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744634889.548:1949): pid=20713 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634889.714:1950): pid=20713 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744634889.714:1951): pid=20713 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634889.717:1952): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634889.717:1953): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634889.727:1954): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634889.727:1955): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634889.728:1956): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=20717 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634889.748:1957): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634889.748:1958): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634889.910:1959): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634889.910:1960): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634889.911:1961): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=20734 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634889.927:1962): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634889.927:1963): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634889.937:1964): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634889.937:1965): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634889.938:1966): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=20748 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634889.960:1967): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634889.960:1968): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634889.975:1969): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634889.975:1970): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634889.976:1971): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=20769 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634890.005:1972): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634890.005:1973): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634890.018:1974): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634890.018:1975): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634890.019:1976): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=20783 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634890.038:1977): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634890.038:1978): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634890.048:1979): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634890.048:1980): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634890.049:1981): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=20798 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744634890.099:1982): pid=20813 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744634890.099:1983): pid=20813 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6565767165716F7063706B6F7975736161666565716F6477786677797767616D203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633343838392E393239343632322D32303733322D3133333333343934393735383837322F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744634890.100:1984): pid=20813 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744634890.101:1985): pid=20813 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634890.269:1986): pid=20813 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744634890.270:1987): pid=20813 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634890.272:1988): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634890.272:1989): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634890.284:1990): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634890.284:1991): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634890.285:1992): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=20817 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634890.304:1993): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634890.304:1994): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634890.452:1995): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634890.452:1996): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634890.453:1997): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=20834 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634890.469:1998): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634890.469:1999): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634890.479:2000): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634890.479:2001): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634890.480:2002): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=20848 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634890.501:2003): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634890.501:2004): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634890.516:2005): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634890.516:2006): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634890.516:2007): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=20869 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634890.546:2008): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634890.546:2009): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634890.557:2010): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634890.557:2011): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634890.558:2012): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=20883 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634890.577:2013): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634890.577:2014): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634890.588:2015): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634890.588:2016): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634890.589:2017): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=20898 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744634890.639:2018): pid=20913 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744634890.639:2019): pid=20913 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D79646D6F6C78666C777461666B6B667567747A6C6363767178786D6B666C7773203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633343839302E343730393735342D32303833322D3232303234363234363339393134382F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744634890.639:2020): pid=20913 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744634890.641:2021): pid=20913 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634890.795:2022): pid=20913 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744634890.795:2023): pid=20913 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634890.797:2024): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634890.797:2025): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634890.807:2026): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634890.807:2027): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634890.808:2028): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=20918 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634890.828:2029): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634890.828:2030): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634891.409:2031): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634891.409:2032): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634891.410:2033): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=20941 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634891.427:2034): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634891.427:2035): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634891.436:2036): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634891.436:2037): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634891.437:2038): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=20955 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634891.459:2039): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634891.459:2040): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634891.475:2041): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634891.475:2042): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634891.476:2043): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=20976 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634891.505:2044): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634891.505:2045): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634891.518:2046): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634891.518:2047): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634891.519:2048): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=20990 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634891.539:2049): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634891.539:2050): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634891.550:2051): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634891.550:2052): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634891.551:2053): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=21005 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744634891.603:2054): pid=21020 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744634891.603:2055): pid=21020 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D75686870776C62716962746C7162706E62797863726C7571626C6E6D6D777477203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633343839312E343238363335342D32303933392D36383533303737323933363435332F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744634891.604:2056): pid=21020 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744634891.605:2057): pid=21020 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634891.764:2058): pid=21020 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744634891.764:2059): pid=21020 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634891.767:2060): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634891.768:2061): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634891.782:2062): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634891.783:2063): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634891.783:2064): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=21027 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634891.804:2065): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634891.804:2066): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634891.817:2067): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634891.817:2068): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634891.818:2069): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=21041 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634891.836:2070): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634891.836:2071): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634891.987:2072): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634891.987:2073): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634891.987:2074): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=21057 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634892.017:2075): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634892.017:2076): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634892.029:2077): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634892.029:2078): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634892.029:2079): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=21071 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634892.048:2080): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634892.048:2081): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634892.058:2082): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634892.058:2083): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634892.059:2084): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=21086 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744634892.110:2085): pid=21101 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744634892.111:2086): pid=21101 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D616F6470696B67656879717A65726C676972797464747A6F6D636F786E7A6971203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633343839312E343238363335342D32303933392D36383533303737323933363435332F416E736962616C6C5A5F636F70792E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744634892.111:2087): pid=21101 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744634892.112:2088): pid=21101 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634892.276:2089): pid=21101 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744634892.276:2090): pid=21101 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634892.279:2091): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634892.279:2092): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634892.289:2093): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634892.289:2094): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634892.290:2095): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=21105 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634892.308:2096): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634892.308:2097): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634892.482:2098): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634892.482:2099): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634892.482:2100): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=21122 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634892.501:2101): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634892.501:2102): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634892.511:2103): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634892.511:2104): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634892.512:2105): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=21136 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634892.533:2106): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634892.533:2107): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634892.549:2108): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634892.549:2109): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634892.550:2110): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=21157 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634892.581:2111): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634892.581:2112): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634892.592:2113): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634892.592:2114): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634892.593:2115): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=21171 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634892.612:2116): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634892.612:2117): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634892.622:2118): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634892.622:2119): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634892.623:2120): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=21186 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744634892.677:2121): pid=21201 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744634892.677:2122): pid=21201 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D68656B77756A6568757A766567696E6176636E6279766D797373736F776A7871203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633343839322E353033343437332D32313132302D3237373531343236383331343234332F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744634892.678:2123): pid=21201 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744634892.680:2124): pid=21201 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=BPF msg=audit(1744634892.968:2125): prog-id=118 op=LOAD type=BPF msg=audit(1744634892.968:2126): prog-id=119 op=LOAD type=BPF msg=audit(1744634892.968:2127): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634892.968:2128): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634892.970:2129): prog-id=120 op=LOAD type=BPF msg=audit(1744634892.970:2130): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634892.972:2131): prog-id=121 op=LOAD type=BPF msg=audit(1744634892.972:2132): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634892.973:2133): prog-id=122 op=LOAD type=BPF msg=audit(1744634892.973:2134): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634892.973:2135): prog-id=123 op=LOAD type=BPF msg=audit(1744634892.973:2136): prog-id=124 op=LOAD type=BPF msg=audit(1744634892.973:2137): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634892.973:2138): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634892.975:2139): prog-id=125 op=LOAD type=BPF msg=audit(1744634892.975:2140): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634892.975:2141): prog-id=126 op=LOAD type=BPF msg=audit(1744634892.975:2142): prog-id=127 op=LOAD type=BPF msg=audit(1744634892.975:2143): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634892.975:2144): prog-id=0 op=UNLOAD type=USER_END msg=audit(1744634892.996:2145): pid=21201 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744634892.996:2146): pid=21201 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634892.999:2147): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634893.000:2148): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634893.013:2149): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634893.013:2150): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634893.014:2151): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=21227 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634893.034:2152): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634893.034:2153): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634893.218:2154): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634893.218:2155): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634893.219:2156): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=21244 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634893.237:2157): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634893.237:2158): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634893.248:2159): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634893.248:2160): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634893.249:2161): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=21258 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634893.274:2162): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634893.274:2163): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634893.292:2164): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634893.292:2165): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634893.293:2166): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=21279 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634893.332:2167): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634893.333:2168): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634893.345:2169): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634893.345:2170): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634893.346:2171): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=21293 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634893.366:2172): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634893.366:2173): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634893.377:2174): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634893.377:2175): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634893.378:2176): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=21308 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744634893.434:2177): pid=21323 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744634893.435:2178): pid=21323 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D756C677062746D67706B6E6D6B646A6770696475717366716B6972717A6F6175203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633343839332E3233393034382D32313234322D3231383632393030303737323738332F416E736962616C6C5A5F73797374656D642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744634893.435:2179): pid=21323 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744634893.437:2180): pid=21323 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=BPF msg=audit(1744634893.922:2181): prog-id=128 op=LOAD type=BPF msg=audit(1744634893.922:2182): prog-id=129 op=LOAD type=BPF msg=audit(1744634893.922:2183): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634893.922:2184): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634893.925:2185): prog-id=130 op=LOAD type=BPF msg=audit(1744634893.925:2186): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634893.925:2187): prog-id=131 op=LOAD type=BPF msg=audit(1744634893.925:2188): prog-id=132 op=LOAD type=BPF msg=audit(1744634893.925:2189): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634893.925:2190): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634893.927:2191): prog-id=133 op=LOAD type=BPF msg=audit(1744634893.927:2192): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634893.927:2193): prog-id=134 op=LOAD type=BPF msg=audit(1744634893.927:2194): prog-id=135 op=LOAD type=BPF msg=audit(1744634893.927:2195): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634893.927:2196): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634893.928:2197): prog-id=136 op=LOAD type=BPF msg=audit(1744634893.928:2198): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634893.929:2199): prog-id=137 op=LOAD type=BPF msg=audit(1744634893.929:2200): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634893.931:2201): prog-id=138 op=LOAD type=BPF msg=audit(1744634893.931:2202): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634893.932:2203): prog-id=139 op=LOAD type=BPF msg=audit(1744634893.932:2204): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634893.932:2205): prog-id=140 op=LOAD type=BPF msg=audit(1744634893.932:2206): prog-id=141 op=LOAD type=BPF msg=audit(1744634893.932:2207): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634893.932:2208): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634893.934:2209): prog-id=142 op=LOAD type=BPF msg=audit(1744634893.934:2210): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634893.934:2211): prog-id=143 op=LOAD type=BPF msg=audit(1744634893.934:2212): prog-id=144 op=LOAD type=BPF msg=audit(1744634893.934:2213): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634893.934:2214): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634893.935:2215): prog-id=145 op=LOAD type=BPF msg=audit(1744634893.935:2216): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634893.937:2217): prog-id=146 op=LOAD type=BPF msg=audit(1744634893.937:2218): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634893.937:2219): prog-id=147 op=LOAD type=BPF msg=audit(1744634893.937:2220): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634893.937:2221): prog-id=148 op=LOAD type=BPF msg=audit(1744634893.938:2222): prog-id=149 op=LOAD type=BPF msg=audit(1744634893.938:2223): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634893.938:2224): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634893.940:2225): prog-id=150 op=LOAD type=BPF msg=audit(1744634893.940:2226): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634893.940:2227): prog-id=151 op=LOAD type=BPF msg=audit(1744634893.940:2228): prog-id=152 op=LOAD type=BPF msg=audit(1744634893.940:2229): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634893.940:2230): prog-id=0 op=UNLOAD type=SERVICE_START msg=audit(1744634894.063:2231): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=containerd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=NETFILTER_CFG msg=audit(1744634894.178:2232): table=filter family=2 entries=0 op=xt_register pid=21390 subj=system_u:system_r:kmod_t:s0 comm="modprobe" type=SYSCALL msg=audit(1744634894.178:2232): arch=c000003e syscall=175 success=yes exit=0 a0=56104d3a8490 a1=e90e a2=56104be04962 a3=5 items=0 ppid=484 pid=21390 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="modprobe" exe="/usr/bin/kmod" subj=system_u:system_r:kmod_t:s0 key=(null)ARCH=x86_64 SYSCALL=init_module AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634894.178:2232): proctitle=2F7573722F7362696E2F6D6F6470726F6265002D71002D2D0069707461626C655F66696C746572 type=NETFILTER_CFG msg=audit(1744634894.230:2233): table=nat family=2 entries=0 op=xt_register pid=21394 subj=system_u:system_r:kmod_t:s0 comm="modprobe" type=SYSCALL msg=audit(1744634894.230:2233): arch=c000003e syscall=175 success=yes exit=0 a0=564efa5fbb90 a1=edfe a2=564ef97c7962 a3=5 items=0 ppid=484 pid=21394 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="modprobe" exe="/usr/bin/kmod" subj=system_u:system_r:kmod_t:s0 key=(null)ARCH=x86_64 SYSCALL=init_module AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634894.230:2233): proctitle=2F7573722F7362696E2F6D6F6470726F6265002D71002D2D0069707461626C655F6E6174 type=NETFILTER_CFG msg=audit(1744634894.245:2234): table=nat family=2 entries=5 op=xt_replace pid=21410 subj=system_u:system_r:iptables_t:s0 comm="iptables" type=SYSCALL msg=audit(1744634894.245:2234): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=561fc9cdda80 items=0 ppid=21366 pid=21410 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634894.245:2234): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 type=NETFILTER_CFG msg=audit(1744634894.247:2235): table=filter family=2 entries=4 op=xt_replace pid=21412 subj=system_u:system_r:iptables_t:s0 comm="iptables" type=SYSCALL msg=audit(1744634894.247:2235): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55634ab73960 items=0 ppid=21366 pid=21412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634894.247:2235): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 type=NETFILTER_CFG msg=audit(1744634894.249:2236): table=filter family=2 entries=6 op=xt_replace pid=21414 subj=system_u:system_r:iptables_t:s0 comm="iptables" type=SYSCALL msg=audit(1744634894.249:2236): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55eee611db50 items=0 ppid=21366 pid=21414 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634894.249:2236): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 type=NETFILTER_CFG msg=audit(1744634894.251:2237): table=filter family=2 entries=8 op=xt_replace pid=21416 subj=system_u:system_r:iptables_t:s0 comm="iptables" type=SYSCALL msg=audit(1744634894.251:2237): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55c786d69d30 items=0 ppid=21366 pid=21416 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634894.251:2237): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 type=NETFILTER_CFG msg=audit(1744634894.253:2238): table=filter family=2 entries=10 op=xt_replace pid=21418 subj=system_u:system_r:iptables_t:s0 comm="iptables" type=SYSCALL msg=audit(1744634894.253:2238): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=5620e0ff35a0 items=0 ppid=21366 pid=21418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634894.253:2238): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E type=NETFILTER_CFG msg=audit(1744634894.255:2239): table=filter family=2 entries=11 op=xt_replace pid=21420 subj=system_u:system_r:iptables_t:s0 comm="iptables" type=SYSCALL msg=audit(1744634894.255:2239): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=5616a46ad720 items=0 ppid=21366 pid=21420 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634894.255:2239): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E type=NETFILTER_CFG msg=audit(1744634894.256:2240): table=filter family=2 entries=12 op=xt_replace pid=21421 subj=system_u:system_r:iptables_t:s0 comm="iptables" type=SYSCALL msg=audit(1744634894.256:2240): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=564208222120 items=0 ppid=21366 pid=21421 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634894.256:2240): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D5000464F52574152440044524F50 type=NETFILTER_CFG msg=audit(1744634894.271:2241): table=filter family=2 entries=12 op=xt_replace pid=21423 subj=system_u:system_r:iptables_t:s0 comm="iptables" type=SYSCALL msg=audit(1744634894.271:2241): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=555610e261e0 items=0 ppid=21366 pid=21423 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634894.271:2241): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 type=NETFILTER_CFG msg=audit(1744634894.273:2242): table=filter family=2 entries=14 op=xt_replace pid=21425 subj=system_u:system_r:iptables_t:s0 comm="iptables" type=SYSCALL msg=audit(1744634894.273:2242): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=560d9f1a9a70 items=0 ppid=21366 pid=21425 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634894.273:2242): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E type=NETFILTER_CFG msg=audit(1744634894.275:2243): table=filter family=2 entries=15 op=xt_replace pid=21427 subj=system_u:system_r:iptables_t:s0 comm="iptables" type=SYSCALL msg=audit(1744634894.275:2243): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55eee57f8bf0 items=0 ppid=21366 pid=21427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634894.275:2243): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 type=NETFILTER_CFG msg=audit(1744634894.286:2244): table=filter family=2 entries=16 op=xt_replace pid=21431 subj=system_u:system_r:iptables_t:s0 comm="iptables" type=SYSCALL msg=audit(1744634894.286:2244): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=5603f40e8e10 items=0 ppid=21366 pid=21431 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634894.286:2244): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 type=NETFILTER_CFG msg=audit(1744634894.287:2245): table=filter family=2 entries=15 op=xt_replace pid=21432 subj=system_u:system_r:iptables_t:s0 comm="iptables" type=SYSCALL msg=audit(1744634894.287:2245): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55e61f58cbf0 items=0 ppid=21366 pid=21432 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634894.287:2245): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 type=NETFILTER_CFG msg=audit(1744634894.314:2246): table=nat family=2 entries=7 op=xt_replace pid=21439 subj=system_u:system_r:iptables_t:s0 comm="iptables" type=SYSCALL msg=audit(1744634894.314:2246): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55bf9f16e990 items=0 ppid=21366 pid=21439 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634894.314:2246): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 type=NETFILTER_CFG msg=audit(1744634894.317:2247): table=nat family=2 entries=8 op=xt_replace pid=21441 subj=system_u:system_r:iptables_t:s0 comm="iptables" type=SYSCALL msg=audit(1744634894.317:2247): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=555d9ba8c4b0 items=0 ppid=21366 pid=21441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634894.317:2247): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E type=NETFILTER_CFG msg=audit(1744634894.321:2248): table=filter family=2 entries=16 op=xt_replace pid=21445 subj=system_u:system_r:iptables_t:s0 comm="iptables" type=SYSCALL msg=audit(1744634894.321:2248): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=562281ffcd60 items=0 ppid=21366 pid=21445 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634894.321:2248): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 type=NETFILTER_CFG msg=audit(1744634894.323:2249): table=filter family=2 entries=17 op=xt_replace pid=21447 subj=system_u:system_r:iptables_t:s0 comm="iptables" type=SYSCALL msg=audit(1744634894.323:2249): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=5562d9637ed0 items=0 ppid=21366 pid=21447 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634894.323:2249): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 type=NETFILTER_CFG msg=audit(1744634894.325:2250): table=nat family=2 entries=9 op=xt_replace pid=21449 subj=system_u:system_r:iptables_t:s0 comm="iptables" type=SYSCALL msg=audit(1744634894.325:2250): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55cfa7089330 items=0 ppid=21366 pid=21449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634894.325:2250): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 type=NETFILTER_CFG msg=audit(1744634894.327:2251): table=nat family=2 entries=10 op=xt_replace pid=21451 subj=system_u:system_r:iptables_t:s0 comm="iptables" type=SYSCALL msg=audit(1744634894.327:2251): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55a687946500 items=0 ppid=21366 pid=21451 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634894.327:2251): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 type=NETFILTER_CFG msg=audit(1744634894.329:2252): table=filter family=2 entries=18 op=xt_replace pid=21453 subj=system_u:system_r:iptables_t:s0 comm="iptables" type=SYSCALL msg=audit(1744634894.329:2252): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=5559ebc49050 items=0 ppid=21366 pid=21453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634894.329:2252): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 type=NETFILTER_CFG msg=audit(1744634894.338:2253): table=filter family=2 entries=19 op=xt_replace pid=21456 subj=system_u:system_r:iptables_t:s0 comm="iptables" type=SYSCALL msg=audit(1744634894.338:2253): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=564456f001d0 items=0 ppid=21366 pid=21456 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634894.338:2253): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 type=NETFILTER_CFG msg=audit(1744634894.340:2254): table=filter family=2 entries=20 op=xt_replace pid=21458 subj=system_u:system_r:iptables_t:s0 comm="iptables" type=SYSCALL msg=audit(1744634894.340:2254): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55e58d0f94f0 items=0 ppid=21366 pid=21458 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634894.340:2254): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 type=NETFILTER_CFG msg=audit(1744634894.342:2255): table=filter family=2 entries=21 op=xt_replace pid=21460 subj=system_u:system_r:iptables_t:s0 comm="iptables" type=SYSCALL msg=audit(1744634894.342:2255): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55ab9cc87670 items=0 ppid=21366 pid=21460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634894.342:2255): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 type=NETFILTER_CFG msg=audit(1744634894.344:2256): table=filter family=2 entries=22 op=xt_replace pid=21462 subj=system_u:system_r:iptables_t:s0 comm="iptables" type=SYSCALL msg=audit(1744634894.344:2256): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55ef0f27d7c0 items=0 ppid=21366 pid=21462 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634894.344:2256): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 type=NETFILTER_CFG msg=audit(1744634894.359:2257): table=filter family=2 entries=23 op=xt_replace pid=21466 subj=system_u:system_r:iptables_t:s0 comm="iptables" type=SYSCALL msg=audit(1744634894.359:2257): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=559f986089f0 items=0 ppid=21366 pid=21466 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634894.359:2257): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 type=NETFILTER_CFG msg=audit(1744634894.360:2258): table=filter family=2 entries=22 op=xt_replace pid=21467 subj=system_u:system_r:iptables_t:s0 comm="iptables" type=SYSCALL msg=audit(1744634894.360:2258): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=556e772b47d0 items=0 ppid=21366 pid=21467 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634894.360:2258): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 type=SERVICE_START msg=audit(1744634894.373:2259): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1744634894.424:2260): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1744634894.451:2261): pid=21323 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744634894.451:2262): pid=21323 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634894.454:2263): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634894.454:2264): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634894.466:2265): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634894.466:2266): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634894.467:2267): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=21504 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634894.487:2268): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634894.487:2269): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634894.844:2270): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634894.844:2271): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634894.845:2272): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=21527 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634894.863:2273): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634894.863:2274): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634894.874:2275): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634894.874:2276): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634894.875:2277): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=21541 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634894.897:2278): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634894.897:2279): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634894.914:2280): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634894.914:2281): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634894.915:2282): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=21562 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634894.955:2283): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634894.955:2284): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634894.967:2285): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634894.967:2286): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634894.968:2287): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=21576 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634894.988:2288): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634894.989:2289): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634895.003:2290): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634895.003:2291): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634895.004:2292): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=21591 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744634895.060:2293): pid=21606 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744634895.060:2294): pid=21606 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D696E726B6F6474656D62716C626B6F6D75696F66706671676176667274657A6F203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633343839342E3836353534362D32313532352D35323335343030333635343634302F416E736962616C6C5A5F73797374656D642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744634895.061:2295): pid=21606 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744634895.064:2296): pid=21606 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634895.389:2297): pid=21606 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744634895.389:2298): pid=21606 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634895.392:2299): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634895.392:2300): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634895.407:2301): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634895.407:2302): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634895.408:2303): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=21612 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634895.427:2304): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634895.427:2305): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634903.120:2306): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634903.120:2307): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634903.121:2308): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=21839 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634903.138:2309): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634903.138:2310): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634903.148:2311): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634903.148:2312): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634903.149:2313): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=21853 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634903.171:2314): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634903.171:2315): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634903.437:2316): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634903.437:2317): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634903.438:2318): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=21873 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634903.457:2319): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634903.457:2320): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634903.468:2321): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634903.468:2322): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634903.469:2323): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=21889 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634903.516:2324): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634903.516:2325): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634903.533:2326): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634903.533:2327): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634903.534:2328): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=21905 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634903.572:2329): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634903.572:2330): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634903.584:2331): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634903.584:2332): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634903.585:2333): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=21919 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634903.603:2334): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634903.603:2335): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634903.614:2336): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634903.614:2337): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634903.615:2338): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=21934 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744634903.666:2339): pid=21949 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744634903.667:2340): pid=21949 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D717375776D6A76666C7666676D65636E78656177736C776369646A6D63736676203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633343930332E3134303437352D32313833372D3131373135383539333436383739352F416E736962616C6C5A5F73657475702E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744634903.667:2341): pid=21949 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744634903.669:2342): pid=21949 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634904.297:2343): pid=21949 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744634904.297:2344): pid=21949 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634904.300:2345): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634904.300:2346): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634904.313:2347): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634904.313:2348): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634904.314:2349): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=21986 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634904.337:2350): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634904.337:2351): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=SERVICE_STOP msg=audit(1744634904.397:2352): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1744634905.691:2353): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634905.691:2354): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634905.692:2355): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=22021 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634905.708:2356): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634905.708:2357): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634905.718:2358): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634905.718:2359): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634905.719:2360): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=22035 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634905.739:2361): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634905.739:2362): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634905.850:2363): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634905.850:2364): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634905.851:2365): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=22056 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634905.881:2366): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634905.881:2367): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634905.893:2368): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634905.893:2369): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634905.894:2370): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=22070 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634905.915:2371): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634905.915:2372): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634905.926:2373): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634905.927:2374): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634905.928:2375): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=22085 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744634905.980:2376): pid=22100 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744634905.981:2377): pid=22100 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E6570646B7261716E6C7765796668716B6672756E636C6F6C786563736A6B68203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633343930352E373039383532372D32323031392D3136363532313332303738343739302F416E736962616C6C5A5F79756D5F7265706F7369746F72792E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744634905.981:2378): pid=22100 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744634905.983:2379): pid=22100 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634906.149:2380): pid=22100 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744634906.149:2381): pid=22100 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634906.152:2382): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634906.152:2383): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634906.162:2384): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634906.162:2385): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634906.163:2386): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=22104 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634906.183:2387): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634906.183:2388): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634906.439:2389): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634906.439:2390): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634906.440:2391): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=22123 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634906.458:2392): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634906.458:2393): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634906.468:2394): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634906.468:2395): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634906.469:2396): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=22137 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634906.489:2397): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634906.489:2398): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634906.600:2399): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634906.600:2400): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634906.601:2401): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=22158 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634906.629:2402): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634906.629:2403): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634906.640:2404): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634906.640:2405): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634906.641:2406): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=22172 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634906.660:2407): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634906.660:2408): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634906.671:2409): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634906.671:2410): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634906.672:2411): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=22187 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744634906.722:2412): pid=22202 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744634906.723:2413): pid=22202 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D66676B7275616B637570646A7A69787A6A6B616F7476766877717863716F7677203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633343930362E343539373236332D32323132312D32333633383636363134373531302F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744634906.723:2414): pid=22202 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744634906.724:2415): pid=22202 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634907.244:2416): pid=22202 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744634907.245:2417): pid=22202 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634907.247:2418): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634907.247:2419): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634907.257:2420): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634907.257:2421): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634907.258:2422): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=22210 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634907.277:2423): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634907.277:2424): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634907.501:2425): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634907.501:2426): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634907.502:2427): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=22227 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634907.519:2428): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634907.519:2429): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634907.529:2430): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634907.529:2431): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634907.530:2432): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=22241 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634907.551:2433): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634907.551:2434): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634907.663:2435): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634907.663:2436): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634907.664:2437): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=22262 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634907.693:2438): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634907.693:2439): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634907.706:2440): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634907.706:2441): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634907.707:2442): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=22276 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634907.725:2443): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634907.725:2444): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634907.735:2445): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634907.736:2446): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634907.737:2447): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=22291 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744634907.790:2448): pid=22306 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744634907.790:2449): pid=22306 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D78706E6B7267796B7061646F626762786C686C6E717562777166736E736C7572203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633343930372E3532303934332D32323232352D3230363636333731393234303532342F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744634907.790:2450): pid=22306 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744634907.792:2451): pid=22306 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634907.952:2452): pid=22306 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744634907.953:2453): pid=22306 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634907.955:2454): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634907.955:2455): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634907.965:2456): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634907.965:2457): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634907.966:2458): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=22310 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634907.985:2459): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634907.985:2460): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634908.200:2461): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634908.200:2462): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634908.201:2463): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=22329 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634908.220:2464): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634908.220:2465): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634908.230:2466): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634908.230:2467): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634908.231:2468): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=22343 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634908.253:2469): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634908.253:2470): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634908.472:2471): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634908.472:2472): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634908.472:2473): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=22364 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634908.504:2474): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634908.504:2475): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634908.514:2476): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634908.514:2477): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634908.515:2478): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=22378 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634908.533:2479): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634908.533:2480): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634908.544:2481): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634908.544:2482): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634908.545:2483): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=22393 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744634908.594:2484): pid=22408 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744634908.594:2485): pid=22408 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D766A7870676B6A6261737A70746861636264776C74716F666B6E77716777627A203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633343930382E323232303532362D32323332372D3137393134313132313030363637342F416E736962616C6C5A5F646E662E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744634908.594:2486): pid=22408 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744634908.596:2487): pid=22408 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=SOFTWARE_UPDATE msg=audit(1744634911.070:2488): pid=22410 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="kubectl-1.24.17-0.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-322-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky" type=USER_END msg=audit(1744634911.392:2489): pid=22408 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744634911.392:2490): pid=22408 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634911.395:2491): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634911.395:2492): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634911.405:2493): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634911.405:2494): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634911.406:2495): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=22414 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634911.425:2496): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634911.425:2497): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634911.523:2498): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634911.523:2499): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634911.524:2500): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=22430 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634911.542:2501): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634911.542:2502): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634911.552:2503): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634911.552:2504): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634911.553:2505): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=22444 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634911.576:2506): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634911.576:2507): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634911.592:2508): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634911.592:2509): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634911.593:2510): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=22465 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634911.626:2511): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634911.626:2512): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634911.637:2513): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634911.638:2514): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634911.638:2515): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=22479 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634911.657:2516): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634911.657:2517): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634911.668:2518): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634911.668:2519): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634911.669:2520): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=22494 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744634911.721:2521): pid=22509 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744634911.722:2522): pid=22509 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A6D6F6461637A6772656F62696C7962656D70676F677571687078617366697A203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633343931312E353434303837362D32323332372D33373234313530323439353635372F416E736962616C6C5A5F646E662E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744634911.722:2523): pid=22509 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744634911.724:2524): pid=22509 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=SERVICE_START msg=audit(1744634918.711:2525): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r4711d103b7e94691ac8b1010bd8cc0a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1744634918.912:2526): prog-id=153 op=LOAD type=BPF msg=audit(1744634918.912:2527): prog-id=154 op=LOAD type=BPF msg=audit(1744634918.912:2528): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634918.912:2529): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634918.915:2530): prog-id=155 op=LOAD type=BPF msg=audit(1744634918.915:2531): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634918.918:2532): prog-id=156 op=LOAD type=BPF msg=audit(1744634918.919:2533): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634918.920:2534): prog-id=157 op=LOAD type=BPF msg=audit(1744634918.920:2535): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634918.920:2536): prog-id=158 op=LOAD type=BPF msg=audit(1744634918.920:2537): prog-id=159 op=LOAD type=BPF msg=audit(1744634918.920:2538): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634918.920:2539): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634918.923:2540): prog-id=160 op=LOAD type=BPF msg=audit(1744634918.923:2541): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634918.923:2542): prog-id=161 op=LOAD type=BPF msg=audit(1744634918.923:2543): prog-id=162 op=LOAD type=BPF msg=audit(1744634918.923:2544): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634918.924:2545): prog-id=0 op=UNLOAD type=SOFTWARE_UPDATE msg=audit(1744634918.944:2546): pid=22511 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="socat-1.7.4.1-6.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-322-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky" type=SOFTWARE_UPDATE msg=audit(1744634918.944:2547): pid=22511 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libnetfilter_queue-1.0.5-1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-322-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky" type=SOFTWARE_UPDATE msg=audit(1744634918.944:2548): pid=22511 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libnetfilter_cttimeout-1.0.0-19.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-322-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky" type=SOFTWARE_UPDATE msg=audit(1744634918.944:2549): pid=22511 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libnetfilter_cthelper-1.0.0-22.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-322-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky" type=SOFTWARE_UPDATE msg=audit(1744634918.944:2550): pid=22511 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="conntrack-tools-1.4.7-4.el9_5.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-322-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky" type=SOFTWARE_UPDATE msg=audit(1744634918.944:2551): pid=22511 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libnftnl-1.2.6-4.el9_4.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-322-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky" type=SOFTWARE_UPDATE msg=audit(1744634918.944:2552): pid=22511 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="iptables-nft-1.8.10-11.el9_5.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-322-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky" type=SOFTWARE_UPDATE msg=audit(1744634918.944:2553): pid=22511 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="kubernetes-cni-1.2.0-0.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-322-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky" type=SOFTWARE_UPDATE msg=audit(1744634918.944:2554): pid=22511 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="kubelet-1.24.17-0.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-322-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky" type=SERVICE_START msg=audit(1744634919.295:2555): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1744634919.295:2556): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1744634919.297:2557): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r4711d103b7e94691ac8b1010bd8cc0a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1744634919.545:2558): pid=22509 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744634919.545:2559): pid=22509 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634919.548:2560): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634919.548:2561): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634919.560:2562): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634919.560:2563): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634919.561:2564): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=22804 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634919.583:2565): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634919.583:2566): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634919.693:2567): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634919.693:2568): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634919.694:2569): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=22819 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634919.714:2570): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634919.714:2571): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634919.728:2572): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634919.728:2573): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634919.729:2574): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=22833 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634919.753:2575): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634919.753:2576): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634919.771:2577): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634919.771:2578): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634919.772:2579): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=22854 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634919.807:2580): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634919.807:2581): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634919.819:2582): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634919.819:2583): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634919.820:2584): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=22868 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634919.839:2585): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634919.839:2586): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634919.851:2587): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634919.851:2588): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634919.852:2589): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=22883 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744634919.910:2590): pid=22898 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744634919.910:2591): pid=22898 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C636E6870716A6E76737A697769636479707A747678766B756E6B70706E6C7A203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633343931392E3731363236322D32323332372D3230313536363733383838373734332F416E736962616C6C5A5F646E662E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744634919.911:2592): pid=22898 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744634919.913:2593): pid=22898 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=BPF msg=audit(1744634923.782:2594): prog-id=163 op=LOAD type=BPF msg=audit(1744634923.782:2595): prog-id=164 op=LOAD type=BPF msg=audit(1744634923.782:2596): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634923.782:2597): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634923.785:2598): prog-id=165 op=LOAD type=BPF msg=audit(1744634923.785:2599): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634923.788:2600): prog-id=166 op=LOAD type=BPF msg=audit(1744634923.788:2601): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634923.789:2602): prog-id=167 op=LOAD type=BPF msg=audit(1744634923.789:2603): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634923.789:2604): prog-id=168 op=LOAD type=BPF msg=audit(1744634923.789:2605): prog-id=169 op=LOAD type=BPF msg=audit(1744634923.789:2606): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634923.789:2607): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634923.791:2608): prog-id=170 op=LOAD type=BPF msg=audit(1744634923.791:2609): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634923.791:2610): prog-id=171 op=LOAD type=BPF msg=audit(1744634923.791:2611): prog-id=172 op=LOAD type=BPF msg=audit(1744634923.791:2612): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634923.791:2613): prog-id=0 op=UNLOAD type=SOFTWARE_UPDATE msg=audit(1744634923.807:2614): pid=22900 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="cri-tools-1.26.0-0.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-322-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky" type=SOFTWARE_UPDATE msg=audit(1744634923.807:2615): pid=22900 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="kubeadm-1.24.17-0.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-322-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky" type=USER_END msg=audit(1744634924.236:2616): pid=22898 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744634924.237:2617): pid=22898 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634924.239:2618): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634924.239:2619): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634924.251:2620): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634924.251:2621): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634924.252:2622): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=22931 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634924.271:2623): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634924.271:2624): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634924.440:2625): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634924.440:2626): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634924.441:2627): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=22947 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634924.459:2628): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634924.459:2629): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634924.469:2630): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634924.469:2631): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634924.470:2632): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=22961 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634924.492:2633): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634924.492:2634): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634924.508:2635): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634924.509:2636): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634924.510:2637): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=22982 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634924.539:2638): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634924.539:2639): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634924.552:2640): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634924.552:2641): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634924.553:2642): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=22996 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634924.574:2643): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634924.574:2644): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634924.587:2645): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634924.587:2646): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634924.588:2647): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=23011 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744634924.640:2648): pid=23026 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744634924.640:2649): pid=23026 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D666678616C67697A6C6662666F7467626170747A6570746B6D6762746779726F203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633343932342E3436303830372D32323934352D39303930343938353831333239312F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744634924.641:2650): pid=23026 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744634924.644:2651): pid=23026 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_ACCT msg=audit(1744634924.873:2652): pid=23038 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" type=USER_CMD msg=audit(1744634924.874:2653): pid=23038 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=6D7620636F6E6669672E746F6D6C202F6574632F636F6E7461696E6572642F636F6E6669672E746F6D6C exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="root" AUID="rocky" type=CRED_REFR msg=audit(1744634924.874:2654): pid=23038 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" type=USER_START msg=audit(1744634924.876:2655): pid=23038 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" type=USER_END msg=audit(1744634924.878:2656): pid=23038 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" type=CRED_DISP msg=audit(1744634924.878:2657): pid=23038 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" type=USER_ACCT msg=audit(1744634924.915:2658): pid=23029 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" type=USER_CMD msg=audit(1744634924.915:2659): pid=23029 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=73797374656D63746C207265737461727420636F6E7461696E657264 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="root" AUID="rocky" type=CRED_REFR msg=audit(1744634924.915:2660): pid=23029 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" type=USER_START msg=audit(1744634924.917:2661): pid=23029 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" type=SERVICE_STOP msg=audit(1744634924.930:2662): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=containerd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1744634924.997:2663): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=containerd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1744634924.999:2664): pid=23029 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" type=CRED_DISP msg=audit(1744634925.000:2665): pid=23029 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" type=USER_END msg=audit(1744634925.014:2666): pid=23026 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744634925.015:2667): pid=23026 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634925.018:2668): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634925.018:2669): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634925.029:2670): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634925.029:2671): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634925.030:2672): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=23057 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634925.048:2673): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634925.048:2674): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634925.342:2675): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634925.342:2676): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634925.343:2677): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=23076 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634925.361:2678): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634925.361:2679): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634925.371:2680): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634925.371:2681): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634925.372:2682): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=23090 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634925.393:2683): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634925.393:2684): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634925.409:2685): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634925.409:2686): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634925.410:2687): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=23111 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634925.438:2688): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634925.438:2689): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634925.449:2690): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634925.449:2691): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634925.450:2692): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=23125 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634925.468:2693): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634925.468:2694): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634925.480:2695): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634925.480:2696): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634925.481:2697): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=23140 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744634925.533:2698): pid=23155 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744634925.534:2699): pid=23155 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D71727164686F72747763786C776D6B626768647564677978726C616E717A796D203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633343932352E3336333432322D32333037342D353233393037363936303935362F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744634925.534:2700): pid=23155 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744634925.536:2701): pid=23155 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634925.733:2702): pid=23155 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744634925.734:2703): pid=23155 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634925.735:2704): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634925.735:2705): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634925.747:2706): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634925.747:2707): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634925.748:2708): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=23165 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634925.770:2709): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634925.770:2710): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634926.637:2711): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634926.637:2712): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634926.638:2713): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=23190 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634926.656:2714): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634926.656:2715): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634926.669:2716): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634926.669:2717): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634926.670:2718): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=23204 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634926.695:2719): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634926.695:2720): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634926.711:2721): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634926.711:2722): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634926.712:2723): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=23225 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634926.743:2724): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634926.743:2725): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634926.753:2726): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634926.754:2727): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634926.754:2728): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=23239 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634926.772:2729): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634926.772:2730): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634926.783:2731): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634926.783:2732): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634926.784:2733): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=23254 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744634926.835:2734): pid=23269 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744634926.836:2735): pid=23269 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E6969657A706E63676E77686C717978637376797868786A6F6B766F6C667869203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633343932362E363538343238342D32333138382D3138363535393032313036393237352F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744634926.836:2736): pid=23269 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744634926.837:2737): pid=23269 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634927.054:2738): pid=23269 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744634927.054:2739): pid=23269 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634927.057:2740): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634927.057:2741): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634927.067:2742): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634927.067:2743): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634927.068:2744): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=23306 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634927.086:2745): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634927.086:2746): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634927.560:2747): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634927.560:2748): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634927.561:2749): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=23325 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634927.578:2750): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634927.578:2751): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634927.588:2752): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634927.588:2753): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634927.589:2754): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=23339 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634927.610:2755): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634927.610:2756): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634927.774:2757): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634927.774:2758): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634927.775:2759): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=23360 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634927.804:2760): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634927.804:2761): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634927.818:2762): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634927.818:2763): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634927.819:2764): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=23374 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634927.837:2765): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634927.837:2766): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634927.848:2767): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634927.848:2768): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634927.849:2769): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=23389 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744634927.898:2770): pid=23404 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744634927.898:2771): pid=23404 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D76676F66777661676F766C6F666F7978716F7569756A79756E737874676E6773203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633343932372E353830323531322D32333332332D3234313335363630383335323339392F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744634927.899:2772): pid=23404 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744634927.900:2773): pid=23404 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634928.063:2774): pid=23404 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744634928.063:2775): pid=23404 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634928.065:2776): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634928.065:2777): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634928.076:2778): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634928.076:2779): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634928.077:2780): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=23408 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634928.096:2781): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634928.096:2782): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634928.338:2783): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634928.338:2784): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634928.339:2785): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=23425 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634928.357:2786): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634928.357:2787): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634928.366:2788): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634928.366:2789): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634928.367:2790): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=23439 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634928.389:2791): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634928.389:2792): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634928.407:2793): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634928.407:2794): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634928.408:2795): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=23460 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634928.437:2796): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634928.437:2797): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634928.448:2798): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634928.448:2799): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634928.449:2800): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=23474 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634928.467:2801): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634928.467:2802): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634928.479:2803): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634928.479:2804): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634928.480:2805): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=23489 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744634928.537:2806): pid=23504 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744634928.537:2807): pid=23504 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D747A797A63786970686A6E636D67696B70766F76746D6375666C747476637175203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633343932382E333538363132352D32333432332D35313835343134383439343435372F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744634928.537:2808): pid=23504 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744634928.539:2809): pid=23504 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634928.716:2810): pid=23504 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744634928.716:2811): pid=23504 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634928.718:2812): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634928.719:2813): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634928.730:2814): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634928.730:2815): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634928.731:2816): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=23510 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634928.749:2817): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634928.749:2818): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634929.380:2819): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634929.381:2820): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634929.382:2821): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=23533 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634929.400:2822): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634929.400:2823): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634929.410:2824): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634929.410:2825): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634929.411:2826): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=23547 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634929.432:2827): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634929.432:2828): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634929.447:2829): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634929.447:2830): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634929.448:2831): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=23568 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634929.476:2832): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634929.476:2833): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634929.487:2834): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634929.487:2835): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634929.487:2836): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=23582 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634929.508:2837): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634929.508:2838): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634929.518:2839): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634929.518:2840): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634929.519:2841): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=23597 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744634929.569:2842): pid=23612 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744634929.569:2843): pid=23612 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D667A6B72657A6B7271776A6374737A77756E706E66707778796A61687362726B203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633343932392E343032323433362D32333533312D3234333931323934363336363533302F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744634929.570:2844): pid=23612 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744634929.571:2845): pid=23612 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634929.739:2846): pid=23612 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744634929.739:2847): pid=23612 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634929.742:2848): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634929.742:2849): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634929.754:2850): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634929.754:2851): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634929.755:2852): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=23616 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634929.774:2853): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634929.774:2854): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634930.029:2855): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634930.029:2856): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634930.030:2857): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=23633 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634930.049:2858): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634930.049:2859): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634930.059:2860): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634930.059:2861): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634930.060:2862): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=23647 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634930.082:2863): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634930.082:2864): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634930.098:2865): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634930.098:2866): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634930.100:2867): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=23668 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634930.130:2868): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634930.130:2869): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634930.141:2870): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634930.141:2871): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634930.141:2872): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=23682 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634930.160:2873): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634930.160:2874): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634930.170:2875): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634930.170:2876): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634930.171:2877): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=23697 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744634930.227:2878): pid=23712 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744634930.228:2879): pid=23712 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D657664736D616A6D726D61717068696A67766A6667776263776B706D68766362203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633343933302E303530393834312D32333633312D3232303739343135393531373937392F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744634930.228:2880): pid=23712 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744634930.230:2881): pid=23712 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634930.417:2882): pid=23712 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744634930.417:2883): pid=23712 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634930.420:2884): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634930.420:2885): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634930.431:2886): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634930.431:2887): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634930.432:2888): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=23716 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634930.451:2889): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634930.451:2890): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634930.680:2891): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634930.680:2892): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634930.681:2893): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=23733 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634930.698:2894): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634930.698:2895): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634930.708:2896): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634930.708:2897): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634930.709:2898): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=23747 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634930.730:2899): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634930.730:2900): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634930.986:2901): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634930.986:2902): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634930.987:2903): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=23768 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634931.024:2904): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634931.024:2905): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634931.035:2906): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634931.035:2907): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634931.036:2908): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=23782 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634931.055:2909): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634931.055:2910): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634931.067:2911): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634931.067:2912): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634931.068:2913): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=23797 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744634931.123:2914): pid=23812 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744634931.123:2915): pid=23812 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6764706C6474716570616E71697874796B6D6471726C6D6966646E7477717063203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633343933302E373030323335342D32333733312D3135393635313239343635343939332F416E736962616C6C5A5F73797374656D642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744634931.124:2916): pid=23812 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744634931.125:2917): pid=23812 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=BPF msg=audit(1744634931.539:2918): prog-id=173 op=LOAD type=BPF msg=audit(1744634931.539:2919): prog-id=174 op=LOAD type=BPF msg=audit(1744634931.539:2920): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634931.539:2921): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634931.541:2922): prog-id=175 op=LOAD type=BPF msg=audit(1744634931.541:2923): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634931.543:2924): prog-id=176 op=LOAD type=BPF msg=audit(1744634931.543:2925): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634931.544:2926): prog-id=177 op=LOAD type=BPF msg=audit(1744634931.544:2927): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634931.544:2928): prog-id=178 op=LOAD type=BPF msg=audit(1744634931.544:2929): prog-id=179 op=LOAD type=BPF msg=audit(1744634931.544:2930): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634931.544:2931): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634931.547:2932): prog-id=180 op=LOAD type=BPF msg=audit(1744634931.547:2933): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634931.547:2934): prog-id=181 op=LOAD type=BPF msg=audit(1744634931.547:2935): prog-id=182 op=LOAD type=BPF msg=audit(1744634931.547:2936): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634931.547:2937): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634931.724:2938): prog-id=183 op=LOAD type=BPF msg=audit(1744634931.724:2939): prog-id=184 op=LOAD type=BPF msg=audit(1744634931.724:2940): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634931.724:2941): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634931.727:2942): prog-id=185 op=LOAD type=BPF msg=audit(1744634931.727:2943): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634931.729:2944): prog-id=186 op=LOAD type=BPF msg=audit(1744634931.729:2945): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634931.730:2946): prog-id=187 op=LOAD type=BPF msg=audit(1744634931.730:2947): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634931.730:2948): prog-id=188 op=LOAD type=BPF msg=audit(1744634931.730:2949): prog-id=189 op=LOAD type=BPF msg=audit(1744634931.730:2950): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634931.730:2951): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634931.732:2952): prog-id=190 op=LOAD type=BPF msg=audit(1744634931.732:2953): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634931.732:2954): prog-id=191 op=LOAD type=BPF msg=audit(1744634931.732:2955): prog-id=192 op=LOAD type=BPF msg=audit(1744634931.732:2956): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634931.732:2957): prog-id=0 op=UNLOAD type=SERVICE_START msg=audit(1744634931.747:2958): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1744634931.770:2959): pid=23812 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744634931.770:2960): pid=23812 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634931.773:2961): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634931.773:2962): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634931.784:2963): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634931.784:2964): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634931.785:2965): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=23871 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=SERVICE_STOP msg=audit(1744634931.805:2966): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=USER_END msg=audit(1744634931.807:2967): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634931.807:2968): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634932.035:2969): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634932.035:2970): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634932.036:2971): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=23889 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634932.055:2972): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634932.055:2973): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634932.066:2974): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634932.066:2975): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634932.067:2976): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=23903 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634932.089:2977): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634932.089:2978): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634932.105:2979): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634932.105:2980): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634932.106:2981): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=23924 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634932.139:2982): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634932.139:2983): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634932.150:2984): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634932.150:2985): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634932.151:2986): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=23938 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634932.173:2987): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634932.173:2988): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634932.184:2989): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634932.184:2990): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634932.185:2991): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=23953 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744634932.238:2992): pid=23968 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744634932.238:2993): pid=23968 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6172616E69756B7265776867716277676A76766468766F637A63626D766A7565203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633343933322E303537313435362D32333838372D32333732363931313231333337392F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744634932.238:2994): pid=23968 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744634932.241:2995): pid=23968 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=SERVICE_START msg=audit(1744634941.868:2996): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1744634941.868:2997): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1744634941.876:2998): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1744634941.944:2999): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1744634952.119:3000): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1744634952.119:3001): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1744634952.128:3002): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1744634952.177:3003): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1744634962.368:3004): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1744634962.368:3005): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1744634962.380:3006): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1744634962.445:3007): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1744634972.473:3008): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1744634972.473:3009): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1744634972.479:3010): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1744634972.530:3011): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1744634976.041:3012): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1744634976.041:3013): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1744634976.253:3014): prog-id=193 op=LOAD type=BPF msg=audit(1744634976.253:3015): prog-id=194 op=LOAD type=BPF msg=audit(1744634976.253:3016): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634976.253:3017): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634976.255:3018): prog-id=195 op=LOAD type=BPF msg=audit(1744634976.256:3019): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634976.258:3020): prog-id=196 op=LOAD type=BPF msg=audit(1744634976.258:3021): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634976.259:3022): prog-id=197 op=LOAD type=BPF msg=audit(1744634976.259:3023): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634976.259:3024): prog-id=198 op=LOAD type=BPF msg=audit(1744634976.259:3025): prog-id=199 op=LOAD type=BPF msg=audit(1744634976.259:3026): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634976.259:3027): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634976.261:3028): prog-id=200 op=LOAD type=BPF msg=audit(1744634976.262:3029): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634976.262:3030): prog-id=201 op=LOAD type=BPF msg=audit(1744634976.262:3031): prog-id=202 op=LOAD type=BPF msg=audit(1744634976.262:3032): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634976.262:3033): prog-id=0 op=UNLOAD type=SERVICE_START msg=audit(1744634976.274:3034): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=NETFILTER_CFG msg=audit(1744634976.904:3035): table=nat family=2 entries=11 op=xt_replace pid=24268 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables" type=SYSCALL msg=audit(1744634976.904:3035): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=5577b87dc320 items=0 ppid=24251 pid=24268 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634976.904:3035): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D44524F50002D74006E6174 type=NETFILTER_CFG msg=audit(1744634976.914:3036): table=nat family=2 entries=13 op=xt_replace pid=24271 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables" type=SYSCALL msg=audit(1744634976.914:3036): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55f7da651160 items=0 ppid=24251 pid=24271 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634976.914:3036): proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D44524F50002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303038303030 type=NETFILTER_CFG msg=audit(1744634976.915:3037): table=filter family=2 entries=23 op=xt_replace pid=24272 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables" type=SYSCALL msg=audit(1744634976.915:3037): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55e164478290 items=0 ppid=24251 pid=24272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634976.915:3037): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 type=NETFILTER_CFG msg=audit(1744634976.925:3038): table=filter family=2 entries=25 op=xt_replace pid=24278 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables" type=SYSCALL msg=audit(1744634976.925:3038): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55704d3b31d0 items=0 ppid=24251 pid=24278 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634976.925:3038): proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206669726577616C6C20666F722064726F7070696E67206D61726B6564207061636B657473002D6D006D61726B type=NETFILTER_CFG msg=audit(1744634976.927:3039): table=filter family=2 entries=26 op=xt_replace pid=24280 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables" type=SYSCALL msg=audit(1744634976.927:3039): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55eded483950 items=0 ppid=24251 pid=24280 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634976.927:3039): proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 type=NETFILTER_CFG msg=audit(1744634976.929:3040): table=filter family=2 entries=27 op=xt_replace pid=24282 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables" type=SYSCALL msg=audit(1744634976.929:3040): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=56327762e490 items=0 ppid=24251 pid=24282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634976.929:3040): proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C type=NETFILTER_CFG msg=audit(1744634976.931:3041): table=filter family=2 entries=28 op=xt_replace pid=24284 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables" type=SYSCALL msg=audit(1744634976.931:3041): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55be3a0ef600 items=0 ppid=24251 pid=24284 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634976.931:3041): proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C type=NETFILTER_CFG msg=audit(1744634976.932:3042): table=nat family=2 entries=14 op=xt_replace pid=24285 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables" type=SYSCALL msg=audit(1744634976.932:3042): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55f42a86a670 items=0 ppid=24251 pid=24285 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634976.932:3042): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D4D415351002D74006E6174 type=NETFILTER_CFG msg=audit(1744634976.933:3043): table=nat family=2 entries=16 op=xt_replace pid=24286 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables" type=SYSCALL msg=audit(1744634976.933:3043): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55b7f0ed7840 items=0 ppid=24251 pid=24286 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634976.933:3043): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 type=NETFILTER_CFG msg=audit(1744634976.936:3044): table=nat family=2 entries=18 op=xt_replace pid=24288 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables" type=SYSCALL msg=audit(1744634976.936:3044): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55a7afc7d690 items=0 ppid=24251 pid=24288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634976.936:3044): proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D4D415351002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303034303030 type=NETFILTER_CFG msg=audit(1744634976.938:3045): table=nat family=2 entries=19 op=xt_replace pid=24290 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables" type=SYSCALL msg=audit(1744634976.938:3045): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=5557982cf1e0 items=0 ppid=24251 pid=24290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634976.938:3045): proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 type=NETFILTER_CFG msg=audit(1744634976.940:3046): table=nat family=2 entries=20 op=xt_replace pid=24292 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables" type=SYSCALL msg=audit(1744634976.940:3046): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=5604ee2962b0 items=0 ppid=24251 pid=24292 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634976.940:3046): proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D006D61726B0000002D2D6D61726B00307830303030343030302F30783030303034303030002D6A0052455455524E type=NETFILTER_CFG msg=audit(1744634976.942:3047): table=nat family=2 entries=21 op=xt_replace pid=24294 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables" type=SYSCALL msg=audit(1744634976.942:3047): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55ab0afc6d90 items=0 ppid=24251 pid=24294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634976.942:3047): proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6A004D41524B002D2D786F722D6D61726B0030783030303034303030 type=NETFILTER_CFG msg=audit(1744634976.945:3048): table=nat family=2 entries=22 op=xt_replace pid=24296 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables" type=SYSCALL msg=audit(1744634976.945:3048): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55f1bc04b9a0 items=0 ppid=24251 pid=24296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634976.945:3048): proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732073657276696365207472616666696320726571756972696E6720534E4154002D6A004D415351554552414445 type=NETFILTER_CFG msg=audit(1744634976.966:3049): table=mangle family=2 entries=0 op=xt_register pid=24298 subj=system_u:system_r:kmod_t:s0 comm="modprobe" type=SYSCALL msg=audit(1744634976.966:3049): arch=c000003e syscall=175 success=yes exit=0 a0=557b387f2490 a1=e97e a2=557b37bd4962 a3=5 items=0 ppid=36 pid=24298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="modprobe" exe="/usr/bin/kmod" subj=system_u:system_r:kmod_t:s0 key=(null)ARCH=x86_64 SYSCALL=init_module AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634976.966:3049): proctitle=2F7573722F7362696E2F6D6F6470726F6265002D71002D2D0069707461626C655F6D616E676C65 type=NETFILTER_CFG msg=audit(1744634976.967:3050): table=mangle family=2 entries=6 op=xt_replace pid=24297 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables" type=SYSCALL msg=audit(1744634976.967:3050): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=559034478bc0 items=0 ppid=24251 pid=24297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634976.967:3050): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 type=NETFILTER_CFG msg=audit(1744634976.987:3051): table=nat family=10 entries=0 op=xt_register pid=24303 subj=system_u:system_r:kmod_t:s0 comm="modprobe" type=SYSCALL msg=audit(1744634976.987:3051): arch=c000003e syscall=175 success=yes exit=0 a0=55ab2a623490 a1=f25e a2=55ab2a4a1962 a3=5 items=0 ppid=484 pid=24303 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="modprobe" exe="/usr/bin/kmod" subj=system_u:system_r:kmod_t:s0 key=(null)ARCH=x86_64 SYSCALL=init_module AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634976.987:3051): proctitle=2F7573722F7362696E2F6D6F6470726F6265002D71002D2D006970367461626C655F6E6174 type=NETFILTER_CFG msg=audit(1744634976.989:3052): table=nat family=10 entries=5 op=xt_replace pid=24299 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="ip6tables" type=SYSCALL msg=audit(1744634976.989:3052): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=564e7c582bf0 items=0 ppid=24251 pid=24299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634976.989:3052): proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D44524F50002D74006E6174 type=NETFILTER_CFG msg=audit(1744634976.989:3053): table=mangle family=2 entries=8 op=xt_replace pid=24300 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables" type=SYSCALL msg=audit(1744634976.989:3053): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=556d0e16fd90 items=0 ppid=24251 pid=24300 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634976.989:3053): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 type=NETFILTER_CFG msg=audit(1744634976.990:3054): table=nat family=2 entries=23 op=xt_replace pid=24305 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables" type=SYSCALL msg=audit(1744634976.990:3054): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=557e2504b670 items=0 ppid=24251 pid=24305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634976.990:3054): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 type=NETFILTER_CFG msg=audit(1744634976.991:3055): table=nat family=10 entries=7 op=xt_replace pid=24306 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="ip6tables" type=SYSCALL msg=audit(1744634976.991:3055): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55d7e16a8ac0 items=0 ppid=24251 pid=24306 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634976.991:3055): proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D44524F50002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303038303030 type=NETFILTER_CFG msg=audit(1744634976.991:3056): table=filter family=2 entries=29 op=xt_replace pid=24307 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables" type=SYSCALL msg=audit(1744634976.991:3056): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55a6c1bb50c0 items=0 ppid=24251 pid=24307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634976.991:3056): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 type=NETFILTER_CFG msg=audit(1744634976.996:3057): table=filter family=10 entries=0 op=xt_register pid=24309 subj=system_u:system_r:kmod_t:s0 comm="modprobe" type=SYSCALL msg=audit(1744634976.996:3057): arch=c000003e syscall=175 success=yes exit=0 a0=558c89828490 a1=ed6e a2=558c88537962 a3=5 items=0 ppid=484 pid=24309 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="modprobe" exe="/usr/bin/kmod" subj=system_u:system_r:kmod_t:s0 key=(null)ARCH=x86_64 SYSCALL=init_module AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634976.996:3057): proctitle=2F7573722F7362696E2F6D6F6470726F6265002D71002D2D006970367461626C655F66696C746572 type=NETFILTER_CFG msg=audit(1744634976.997:3058): table=filter family=10 entries=4 op=xt_replace pid=24308 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="ip6tables" type=SYSCALL msg=audit(1744634976.997:3058): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=56336dd07a90 items=0 ppid=24251 pid=24308 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634976.997:3058): proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 type=NETFILTER_CFG msg=audit(1744634977.000:3059): table=filter family=10 entries=6 op=xt_replace pid=24311 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="ip6tables" type=SYSCALL msg=audit(1744634977.000:3059): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=5642c4b73ad0 items=0 ppid=24251 pid=24311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634977.000:3059): proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206669726577616C6C20666F722064726F7070696E67206D61726B6564207061636B657473002D6D006D61726B type=NETFILTER_CFG msg=audit(1744634977.002:3060): table=filter family=10 entries=7 op=xt_replace pid=24313 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="ip6tables" type=SYSCALL msg=audit(1744634977.002:3060): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=561a3cc88860 items=0 ppid=24251 pid=24313 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634977.002:3060): proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C type=NETFILTER_CFG msg=audit(1744634977.004:3061): table=filter family=10 entries=8 op=xt_replace pid=24315 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="ip6tables" type=SYSCALL msg=audit(1744634977.004:3061): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55af3ee00a50 items=0 ppid=24251 pid=24315 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634977.004:3061): proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C type=NETFILTER_CFG msg=audit(1744634977.005:3062): table=nat family=10 entries=8 op=xt_replace pid=24316 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="ip6tables" type=SYSCALL msg=audit(1744634977.005:3062): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55a138a53020 items=0 ppid=24251 pid=24316 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634977.005:3062): proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D4D415351002D74006E6174 type=NETFILTER_CFG msg=audit(1744634977.006:3063): table=nat family=10 entries=10 op=xt_replace pid=24317 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="ip6tables" type=SYSCALL msg=audit(1744634977.006:3063): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=559f0505a270 items=0 ppid=24251 pid=24317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634977.006:3063): proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 type=NETFILTER_CFG msg=audit(1744634977.008:3064): table=nat family=10 entries=12 op=xt_replace pid=24319 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="ip6tables" type=SYSCALL msg=audit(1744634977.008:3064): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55ef8d492140 items=0 ppid=24251 pid=24319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634977.008:3064): proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D4D415351002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303034303030 type=NETFILTER_CFG msg=audit(1744634977.011:3065): table=nat family=10 entries=13 op=xt_replace pid=24321 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="ip6tables" type=SYSCALL msg=audit(1744634977.011:3065): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=5593890f2d50 items=0 ppid=24251 pid=24321 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634977.011:3065): proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 type=NETFILTER_CFG msg=audit(1744634977.013:3066): table=nat family=10 entries=14 op=xt_replace pid=24323 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="ip6tables" type=SYSCALL msg=audit(1744634977.013:3066): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=5606b0909e90 items=0 ppid=24251 pid=24323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634977.013:3066): proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D006D61726B0000002D2D6D61726B00307830303030343030302F30783030303034303030002D6A0052455455524E type=NETFILTER_CFG msg=audit(1744634977.015:3067): table=nat family=10 entries=15 op=xt_replace pid=24325 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="ip6tables" type=SYSCALL msg=audit(1744634977.015:3067): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55cd2d68e9b0 items=0 ppid=24251 pid=24325 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634977.015:3067): proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6A004D41524B002D2D786F722D6D61726B0030783030303034303030 type=NETFILTER_CFG msg=audit(1744634977.020:3068): table=nat family=10 entries=16 op=xt_replace pid=24327 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="ip6tables" type=SYSCALL msg=audit(1744634977.020:3068): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=5625526c36c0 items=0 ppid=24251 pid=24327 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634977.020:3068): proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732073657276696365207472616666696320726571756972696E6720534E4154002D6A004D415351554552414445 type=NETFILTER_CFG msg=audit(1744634977.033:3069): table=mangle family=10 entries=0 op=xt_register pid=24329 subj=system_u:system_r:kmod_t:s0 comm="modprobe" type=SYSCALL msg=audit(1744634977.033:3069): arch=c000003e syscall=175 success=yes exit=0 a0=55d1014ff490 a1=ebd6 a2=55d0ffd0d962 a3=5 items=0 ppid=36 pid=24329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="modprobe" exe="/usr/bin/kmod" subj=system_u:system_r:kmod_t:s0 key=(null)ARCH=x86_64 SYSCALL=init_module AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634977.033:3069): proctitle=2F7573722F7362696E2F6D6F6470726F6265002D71002D2D006970367461626C655F6D616E676C65 type=NETFILTER_CFG msg=audit(1744634977.035:3070): table=mangle family=10 entries=6 op=xt_replace pid=24328 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="ip6tables" type=SYSCALL msg=audit(1744634977.035:3070): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=557277b19d50 items=0 ppid=24251 pid=24328 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634977.035:3070): proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 type=NETFILTER_CFG msg=audit(1744634977.037:3071): table=mangle family=10 entries=8 op=xt_replace pid=24330 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="ip6tables" type=SYSCALL msg=audit(1744634977.037:3071): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55c0391c7f90 items=0 ppid=24251 pid=24330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634977.037:3071): proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 type=NETFILTER_CFG msg=audit(1744634977.038:3072): table=nat family=10 entries=17 op=xt_replace pid=24331 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="ip6tables" type=SYSCALL msg=audit(1744634977.038:3072): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55a18c4e5380 items=0 ppid=24251 pid=24331 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634977.038:3072): proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 type=NETFILTER_CFG msg=audit(1744634977.039:3073): table=filter family=10 entries=9 op=xt_replace pid=24332 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="ip6tables" type=SYSCALL msg=audit(1744634977.039:3073): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55635570a540 items=0 ppid=24251 pid=24332 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634977.039:3073): proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 type=BPF msg=audit(1744634980.949:3074): prog-id=203 op=LOAD type=BPF msg=audit(1744634980.951:3075): prog-id=204 op=LOAD type=SYSCALL msg=audit(1744634980.951:3075): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000147ad0 a2=90 a3=0 items=0 ppid=24345 pid=24363 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634980.951:3075): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3538623362386562333933626163376361626338306532396530623163 type=BPF msg=audit(1744634980.951:3076): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634980.951:3077): prog-id=205 op=LOAD type=SYSCALL msg=audit(1744634980.951:3077): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000147c48 a2=90 a3=0 items=0 ppid=24345 pid=24363 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634980.951:3077): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3538623362386562333933626163376361626338306532396530623163 type=BPF msg=audit(1744634980.952:3078): prog-id=206 op=LOAD type=SYSCALL msg=audit(1744634980.952:3078): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001479d8 a2=90 a3=0 items=0 ppid=24345 pid=24363 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634980.952:3078): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3538623362386562333933626163376361626338306532396530623163 type=BPF msg=audit(1744634980.952:3079): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634980.952:3080): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634980.952:3081): prog-id=207 op=LOAD type=SYSCALL msg=audit(1744634980.952:3081): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000147eb0 a2=90 a3=0 items=0 ppid=24345 pid=24363 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634980.952:3081): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3538623362386562333933626163376361626338306532396530623163 type=BPF msg=audit(1744634980.957:3082): prog-id=208 op=LOAD type=BPF msg=audit(1744634980.958:3083): prog-id=209 op=LOAD type=SYSCALL msg=audit(1744634980.958:3083): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000239ad0 a2=90 a3=0 items=0 ppid=24365 pid=24388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634980.958:3083): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3630353438346430326437623161623434666236616339366131633461 type=BPF msg=audit(1744634980.958:3084): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634980.959:3085): prog-id=210 op=LOAD type=SYSCALL msg=audit(1744634980.959:3085): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000239c48 a2=90 a3=0 items=0 ppid=24365 pid=24388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634980.959:3085): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3630353438346430326437623161623434666236616339366131633461 type=BPF msg=audit(1744634980.959:3086): prog-id=211 op=LOAD type=SYSCALL msg=audit(1744634980.959:3086): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0002399d8 a2=90 a3=0 items=0 ppid=24365 pid=24388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634980.959:3086): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3630353438346430326437623161623434666236616339366131633461 type=BPF msg=audit(1744634980.959:3087): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634980.959:3088): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634980.959:3089): prog-id=212 op=LOAD type=SYSCALL msg=audit(1744634980.959:3089): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000239eb0 a2=90 a3=0 items=0 ppid=24365 pid=24388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634980.959:3089): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3630353438346430326437623161623434666236616339366131633461 type=BPF msg=audit(1744634980.965:3090): prog-id=213 op=LOAD type=BPF msg=audit(1744634980.966:3091): prog-id=214 op=LOAD type=SYSCALL msg=audit(1744634980.966:3091): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001a3ad0 a2=90 a3=0 items=0 ppid=24404 pid=24436 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634980.966:3091): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531663664393066343139336235343635326335393431663730346131 type=BPF msg=audit(1744634980.966:3092): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634980.966:3093): prog-id=215 op=LOAD type=SYSCALL msg=audit(1744634980.966:3093): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001a3c48 a2=90 a3=0 items=0 ppid=24404 pid=24436 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634980.966:3093): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531663664393066343139336235343635326335393431663730346131 type=BPF msg=audit(1744634980.966:3094): prog-id=216 op=LOAD type=SYSCALL msg=audit(1744634980.966:3094): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001a39d8 a2=90 a3=0 items=0 ppid=24404 pid=24436 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634980.966:3094): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531663664393066343139336235343635326335393431663730346131 type=BPF msg=audit(1744634980.966:3095): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634980.966:3096): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634980.966:3097): prog-id=217 op=LOAD type=SYSCALL msg=audit(1744634980.966:3097): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001a3eb0 a2=90 a3=0 items=0 ppid=24404 pid=24436 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634980.966:3097): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531663664393066343139336235343635326335393431663730346131 type=BPF msg=audit(1744634980.978:3098): prog-id=218 op=LOAD type=BPF msg=audit(1744634980.978:3099): prog-id=219 op=LOAD type=SYSCALL msg=audit(1744634980.978:3099): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001bfad0 a2=90 a3=0 items=0 ppid=24425 pid=24463 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634980.978:3099): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3833313363613638383563386634623465316134376466343561393037 type=BPF msg=audit(1744634980.978:3100): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634980.978:3101): prog-id=220 op=LOAD type=SYSCALL msg=audit(1744634980.978:3101): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001bfc48 a2=90 a3=0 items=0 ppid=24425 pid=24463 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634980.978:3101): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3833313363613638383563386634623465316134376466343561393037 type=BPF msg=audit(1744634980.979:3102): prog-id=221 op=LOAD type=SYSCALL msg=audit(1744634980.979:3102): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001bf9d8 a2=90 a3=0 items=0 ppid=24425 pid=24463 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634980.979:3102): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3833313363613638383563386634623465316134376466343561393037 type=BPF msg=audit(1744634980.979:3103): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634980.979:3104): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634980.979:3105): prog-id=222 op=LOAD type=SYSCALL msg=audit(1744634980.979:3105): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001bfeb0 a2=90 a3=0 items=0 ppid=24425 pid=24463 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634980.979:3105): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3833313363613638383563386634623465316134376466343561393037 type=BPF msg=audit(1744634981.128:3106): prog-id=223 op=LOAD type=BPF msg=audit(1744634981.129:3107): prog-id=224 op=LOAD type=SYSCALL msg=audit(1744634981.129:3107): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000125ad0 a2=90 a3=0 items=0 ppid=24345 pid=24534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634981.129:3107): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6330356233383338363034343535613962323538346636613438323562 type=BPF msg=audit(1744634981.129:3108): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634981.129:3109): prog-id=225 op=LOAD type=SYSCALL msg=audit(1744634981.129:3109): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000125c48 a2=90 a3=0 items=0 ppid=24345 pid=24534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634981.129:3109): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6330356233383338363034343535613962323538346636613438323562 type=BPF msg=audit(1744634981.129:3110): prog-id=226 op=LOAD type=SYSCALL msg=audit(1744634981.129:3110): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001259d8 a2=90 a3=0 items=0 ppid=24345 pid=24534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634981.129:3110): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6330356233383338363034343535613962323538346636613438323562 type=BPF msg=audit(1744634981.129:3111): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634981.129:3112): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634981.129:3113): prog-id=227 op=LOAD type=SYSCALL msg=audit(1744634981.129:3113): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000125eb0 a2=90 a3=0 items=0 ppid=24345 pid=24534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634981.129:3113): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6330356233383338363034343535613962323538346636613438323562 type=BPF msg=audit(1744634981.134:3114): prog-id=228 op=LOAD type=BPF msg=audit(1744634981.135:3115): prog-id=229 op=LOAD type=SYSCALL msg=audit(1744634981.135:3115): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000199ad0 a2=90 a3=0 items=0 ppid=24425 pid=24573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634981.135:3115): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3966353761333831653361613862303862323937393838313338326538 type=BPF msg=audit(1744634981.135:3116): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634981.135:3117): prog-id=230 op=LOAD type=SYSCALL msg=audit(1744634981.135:3117): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000199c48 a2=90 a3=0 items=0 ppid=24425 pid=24573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634981.135:3117): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3966353761333831653361613862303862323937393838313338326538 type=BPF msg=audit(1744634981.135:3118): prog-id=231 op=LOAD type=SYSCALL msg=audit(1744634981.135:3118): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001999d8 a2=90 a3=0 items=0 ppid=24425 pid=24573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634981.135:3118): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3966353761333831653361613862303862323937393838313338326538 type=BPF msg=audit(1744634981.135:3119): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634981.135:3120): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634981.135:3121): prog-id=232 op=LOAD type=SYSCALL msg=audit(1744634981.135:3121): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000199eb0 a2=90 a3=0 items=0 ppid=24425 pid=24573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634981.135:3121): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3966353761333831653361613862303862323937393838313338326538 type=BPF msg=audit(1744634981.197:3122): prog-id=233 op=LOAD type=BPF msg=audit(1744634981.198:3123): prog-id=234 op=LOAD type=SYSCALL msg=audit(1744634981.198:3123): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001c1ad0 a2=90 a3=0 items=0 ppid=24365 pid=24554 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634981.198:3123): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3532393630643231373334643162383461323265363437366231643033 type=BPF msg=audit(1744634981.198:3124): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634981.198:3125): prog-id=235 op=LOAD type=SYSCALL msg=audit(1744634981.198:3125): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001c1c48 a2=90 a3=0 items=0 ppid=24365 pid=24554 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634981.198:3125): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3532393630643231373334643162383461323265363437366231643033 type=BPF msg=audit(1744634981.198:3126): prog-id=236 op=LOAD type=SYSCALL msg=audit(1744634981.198:3126): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001c19d8 a2=90 a3=0 items=0 ppid=24365 pid=24554 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634981.198:3126): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3532393630643231373334643162383461323265363437366231643033 type=BPF msg=audit(1744634981.198:3127): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634981.198:3128): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634981.198:3129): prog-id=237 op=LOAD type=SYSCALL msg=audit(1744634981.198:3129): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001c1eb0 a2=90 a3=0 items=0 ppid=24365 pid=24554 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634981.198:3129): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3532393630643231373334643162383461323265363437366231643033 type=BPF msg=audit(1744634981.203:3130): prog-id=238 op=LOAD type=BPF msg=audit(1744634981.204:3131): prog-id=239 op=LOAD type=SYSCALL msg=audit(1744634981.204:3131): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000237ad0 a2=90 a3=0 items=0 ppid=24404 pid=24553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634981.204:3131): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164373762366439366238643265396337303932633735316230393432 type=BPF msg=audit(1744634981.204:3132): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634981.204:3133): prog-id=240 op=LOAD type=SYSCALL msg=audit(1744634981.204:3133): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000237c48 a2=90 a3=0 items=0 ppid=24404 pid=24553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634981.204:3133): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164373762366439366238643265396337303932633735316230393432 type=BPF msg=audit(1744634981.204:3134): prog-id=241 op=LOAD type=SYSCALL msg=audit(1744634981.204:3134): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0002379d8 a2=90 a3=0 items=0 ppid=24404 pid=24553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634981.204:3134): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164373762366439366238643265396337303932633735316230393432 type=BPF msg=audit(1744634981.204:3135): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634981.204:3136): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634981.204:3137): prog-id=242 op=LOAD type=SYSCALL msg=audit(1744634981.204:3137): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000237eb0 a2=90 a3=0 items=0 ppid=24404 pid=24553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744634981.204:3137): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164373762366439366238643265396337303932633735316230393432 type=BPF msg=audit(1744634987.050:3138): prog-id=243 op=LOAD type=BPF msg=audit(1744634987.050:3139): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634987.050:3140): prog-id=244 op=LOAD type=BPF msg=audit(1744634987.050:3141): prog-id=245 op=LOAD type=BPF msg=audit(1744634987.050:3142): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634987.050:3143): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634987.052:3144): prog-id=246 op=LOAD type=BPF msg=audit(1744634987.052:3145): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634987.052:3146): prog-id=247 op=LOAD type=BPF msg=audit(1744634987.052:3147): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634987.052:3148): prog-id=248 op=LOAD type=BPF msg=audit(1744634987.052:3149): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634987.054:3150): prog-id=249 op=LOAD type=BPF msg=audit(1744634987.054:3151): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634987.055:3152): prog-id=250 op=LOAD type=BPF msg=audit(1744634987.055:3153): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634987.057:3154): prog-id=251 op=LOAD type=BPF msg=audit(1744634987.057:3155): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634987.058:3156): prog-id=252 op=LOAD type=BPF msg=audit(1744634987.058:3157): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634987.058:3158): prog-id=253 op=LOAD type=BPF msg=audit(1744634987.058:3159): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634987.058:3160): prog-id=254 op=LOAD type=BPF msg=audit(1744634987.058:3161): prog-id=255 op=LOAD type=BPF msg=audit(1744634987.058:3162): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634987.058:3163): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634987.060:3164): prog-id=256 op=LOAD type=BPF msg=audit(1744634987.060:3165): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634987.062:3166): prog-id=257 op=LOAD type=BPF msg=audit(1744634987.062:3167): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634987.062:3168): prog-id=258 op=LOAD type=BPF msg=audit(1744634987.062:3169): prog-id=259 op=LOAD type=BPF msg=audit(1744634987.062:3170): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634987.062:3171): prog-id=0 op=UNLOAD type=BPF msg=audit(1744634987.063:3172): prog-id=260 op=LOAD type=BPF msg=audit(1744634987.063:3173): prog-id=0 op=UNLOAD type=SERVICE_STOP msg=audit(1744634987.087:3174): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1744634987.099:3175): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1744634987.281:3176): pid=23968 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744634987.281:3177): pid=23968 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634987.285:3178): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634987.285:3179): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634987.300:3180): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634987.300:3181): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634987.301:3182): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=24774 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634987.327:3183): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634987.327:3184): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634987.625:3185): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634987.625:3186): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634987.626:3187): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=24796 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634987.645:3188): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634987.645:3189): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634987.656:3190): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634987.656:3191): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634987.657:3192): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=24810 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634987.682:3193): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634987.682:3194): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634987.700:3195): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634987.700:3196): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634987.701:3197): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=24831 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634987.731:3198): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634987.731:3199): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634987.743:3200): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634987.743:3201): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634987.744:3202): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=24845 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634987.766:3203): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634987.766:3204): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634987.778:3205): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634987.778:3206): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634987.780:3207): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=24860 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744634987.833:3208): pid=24875 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744634987.834:3209): pid=24875 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D79627873616967706873636A766161717379736D7471626E79747A7579767974203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633343938372E363437313031392D32343739342D3134373439303533303636343730382F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744634987.834:3210): pid=24875 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744634987.837:3211): pid=24875 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634988.040:3212): pid=24875 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744634988.040:3213): pid=24875 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634988.043:3214): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634988.043:3215): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634988.053:3216): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634988.053:3217): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634988.054:3218): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=24889 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634988.073:3219): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634988.073:3220): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634988.511:3221): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634988.511:3222): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634988.512:3223): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=24908 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634988.530:3224): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634988.530:3225): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634988.540:3226): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634988.540:3227): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634988.541:3228): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=24922 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634988.563:3229): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634988.563:3230): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634988.578:3231): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634988.578:3232): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634988.579:3233): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=24943 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634988.609:3234): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634988.609:3235): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634988.620:3236): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634988.620:3237): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634988.621:3238): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=24957 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634988.640:3239): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634988.640:3240): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634988.652:3241): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634988.652:3242): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634988.653:3243): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=24972 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744634988.706:3244): pid=24987 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744634988.706:3245): pid=24987 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7679776A766974667A6E6C796D736F646770667479666B6A6C66676870746C6B203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633343938382E353332313535382D32343930362D39383638353331383830303936312F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744634988.706:3246): pid=24987 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744634988.708:3247): pid=24987 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634989.060:3248): pid=24987 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744634989.061:3249): pid=24987 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634989.063:3250): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634989.063:3251): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634989.075:3252): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634989.075:3253): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634989.076:3254): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=25000 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634989.096:3255): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634989.096:3256): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634989.735:3257): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634989.735:3258): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634989.736:3259): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=25025 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634989.754:3260): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634989.754:3261): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634989.764:3262): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634989.764:3263): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634989.765:3264): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=25039 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634989.787:3265): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634989.787:3266): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634989.808:3267): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634989.808:3268): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634989.809:3269): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=25060 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634989.837:3270): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634989.837:3271): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634989.848:3272): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634989.848:3273): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634989.849:3274): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=25074 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634989.867:3275): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634989.868:3276): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634989.878:3277): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634989.878:3278): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634989.879:3279): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=25089 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744634989.933:3280): pid=25104 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744634989.933:3281): pid=25104 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D68767A6F7A6F7A62647A7169756B7064677776776664777A646863756F666D6E203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633343938392E373535383434382D32353032332D32393436323730363630373935372F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744634989.934:3282): pid=25104 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744634989.935:3283): pid=25104 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634990.093:3284): pid=25104 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744634990.094:3285): pid=25104 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634990.096:3286): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634990.096:3287): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634990.111:3288): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634990.111:3289): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634990.112:3290): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=25109 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634990.132:3291): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634990.132:3292): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634990.142:3293): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634990.142:3294): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634990.143:3295): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=25123 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634990.164:3296): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634990.164:3297): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634990.281:3298): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634990.281:3299): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634990.282:3300): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=25139 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634990.313:3301): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634990.313:3302): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634990.325:3303): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634990.325:3304): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634990.326:3305): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=25153 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634990.346:3306): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634990.346:3307): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634990.360:3308): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634990.360:3309): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634990.361:3310): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=25168 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744634990.413:3311): pid=25183 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744634990.413:3312): pid=25183 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C6876616D756B67736D756A646A79726C6F726F696C727463697179726D6A66203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633343938392E373535383434382D32353032332D32393436323730363630373935372F416E736962616C6C5A5F636F70792E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744634990.413:3313): pid=25183 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744634990.415:3314): pid=25183 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634990.597:3315): pid=25183 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744634990.597:3316): pid=25183 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634990.600:3317): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634990.600:3318): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634990.611:3319): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634990.611:3320): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634990.612:3321): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=25187 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634990.630:3322): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634990.630:3323): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634990.860:3324): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634990.860:3325): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634990.861:3326): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=25204 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634990.879:3327): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634990.879:3328): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634990.890:3329): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634990.890:3330): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634990.891:3331): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=25218 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634990.913:3332): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634990.913:3333): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634990.928:3334): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634990.928:3335): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634990.929:3336): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=25239 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634990.958:3337): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634990.958:3338): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634990.969:3339): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634990.969:3340): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634990.970:3341): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=25253 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634990.989:3342): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634990.989:3343): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634990.999:3344): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634990.999:3345): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634991.000:3346): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=25268 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744634991.053:3347): pid=25283 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744634991.053:3348): pid=25283 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D736374796D756F7467727971617173616870756C716D7176707873777677646B203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633343939302E383831333334332D32353230322D3134393738303130333830323039312F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744634991.054:3349): pid=25283 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744634991.055:3350): pid=25283 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634991.972:3351): pid=25283 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744634991.972:3352): pid=25283 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634991.975:3353): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634991.975:3354): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634991.985:3355): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634991.985:3356): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634991.986:3357): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=25293 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634992.006:3358): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634992.006:3359): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634992.220:3360): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634992.221:3361): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634992.222:3362): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=25310 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634992.241:3363): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634992.241:3364): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634992.252:3365): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634992.252:3366): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634992.253:3367): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=25324 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634992.276:3368): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634992.276:3369): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634992.291:3370): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634992.291:3371): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634992.292:3372): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=25345 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634992.320:3373): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634992.320:3374): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634992.330:3375): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634992.330:3376): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634992.331:3377): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=25359 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634992.350:3378): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634992.350:3379): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634992.361:3380): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634992.361:3381): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634992.362:3382): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=25374 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744634992.411:3383): pid=25389 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744634992.412:3384): pid=25389 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D786B64676361756A7166756568647267756777676E6E6663616F6374716C726B203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633343939322E323433333332392D32353330382D32333833363038363631313539322F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744634992.412:3385): pid=25389 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744634992.414:3386): pid=25389 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634992.621:3387): pid=25389 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744634992.622:3388): pid=25389 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634992.624:3389): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634992.624:3390): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634992.635:3391): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634992.635:3392): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634992.636:3393): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=25402 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634992.656:3394): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634992.656:3395): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634993.303:3396): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634993.303:3397): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634993.304:3398): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=25425 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634993.320:3399): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634993.321:3400): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634993.331:3401): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634993.331:3402): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634993.332:3403): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=25439 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634993.353:3404): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634993.353:3405): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634993.368:3406): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634993.368:3407): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634993.369:3408): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=25460 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634993.396:3409): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634993.397:3410): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634993.407:3411): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634993.407:3412): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634993.408:3413): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=25474 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634993.427:3414): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634993.427:3415): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634993.436:3416): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634993.436:3417): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634993.437:3418): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=25489 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744634993.490:3419): pid=25504 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744634993.490:3420): pid=25504 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D75696D656279646471746E657978777975776A616A7678756A616D6261646461203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633343939332E3332323634392D32353432332D3130303739313233363832313936302F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744634993.491:3421): pid=25504 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744634993.493:3422): pid=25504 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634993.723:3423): pid=25504 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744634993.723:3424): pid=25504 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634993.725:3425): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634993.725:3426): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634993.736:3427): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634993.736:3428): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634993.737:3429): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=25517 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634993.758:3430): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634993.758:3431): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634994.012:3432): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634994.012:3433): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634994.013:3434): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=25534 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634994.031:3435): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634994.031:3436): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634994.041:3437): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634994.041:3438): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634994.042:3439): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=25548 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634994.062:3440): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634994.063:3441): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634994.078:3442): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634994.078:3443): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634994.079:3444): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=25569 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634994.106:3445): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634994.106:3446): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634994.117:3447): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634994.117:3448): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634994.118:3449): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=25583 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634994.137:3450): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634994.137:3451): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634994.148:3452): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634994.148:3453): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634994.149:3454): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=25598 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744634994.204:3455): pid=25613 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744634994.205:3456): pid=25613 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7279736B686876656F69717564697961787A78767A6E6E67696A766270647275203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633343939342E303333303132362D32353533322D3235373730343433373832343835342F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744634994.205:3457): pid=25613 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744634994.206:3458): pid=25613 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634994.428:3459): pid=25613 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744634994.428:3460): pid=25613 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634994.430:3461): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634994.430:3462): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634994.441:3463): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634994.441:3464): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634994.442:3465): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=25623 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634994.461:3466): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634994.461:3467): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634994.699:3468): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634994.699:3469): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634994.700:3470): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=25640 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634994.717:3471): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634994.717:3472): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634994.727:3473): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634994.727:3474): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634994.728:3475): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=25654 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634994.748:3476): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634994.748:3477): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634994.763:3478): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634994.763:3479): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634994.764:3480): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=25675 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634994.793:3481): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634994.793:3482): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634994.804:3483): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634994.804:3484): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634994.805:3485): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=25689 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634994.825:3486): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634994.825:3487): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634994.836:3488): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634994.836:3489): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634994.837:3490): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=25704 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744634994.891:3491): pid=25719 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744634994.891:3492): pid=25719 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D656466716F76666A6365777075777974616668746773656263796D6A666A6C76203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633343939342E3731383837352D32353633382D39333838313530323430333032382F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744634994.892:3493): pid=25719 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744634994.893:3494): pid=25719 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634995.144:3495): pid=25719 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744634995.144:3496): pid=25719 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744634995.146:3497): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634995.146:3498): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744634995.157:3499): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744634995.157:3500): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634995.158:3501): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=25729 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634995.180:3502): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634995.180:3503): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634995.341:3504): pid=13507 uid=0 auid=1000 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13510 suid=1000 rport=58160 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634995.341:3505): pid=13507 uid=0 auid=1000 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=13510 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744634995.344:3506): pid=13507 uid=0 auid=1000 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=CRED_DISP msg=audit(1744634995.344:3507): pid=13507 uid=0 auid=1000 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_END msg=audit(1744634995.345:3508): pid=13507 uid=0 auid=1000 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744634995.345:3509): pid=13507 uid=0 auid=1000 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744634995.345:3510): pid=13507 uid=0 auid=1000 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=13507 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=BPF msg=audit(1744635001.988:3511): prog-id=261 op=LOAD type=BPF msg=audit(1744635001.989:3512): prog-id=262 op=LOAD type=SYSCALL msg=audit(1744635001.989:3512): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000195ad0 a2=90 a3=0 items=0 ppid=25776 pid=25788 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744635001.989:3512): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336623332333932333830326631303138333662633963386534343636 type=BPF msg=audit(1744635001.989:3513): prog-id=0 op=UNLOAD type=BPF msg=audit(1744635001.989:3514): prog-id=263 op=LOAD type=SYSCALL msg=audit(1744635001.989:3514): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000195c48 a2=90 a3=0 items=0 ppid=25776 pid=25788 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744635001.989:3514): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336623332333932333830326631303138333662633963386534343636 type=BPF msg=audit(1744635001.989:3515): prog-id=264 op=LOAD type=SYSCALL msg=audit(1744635001.989:3515): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001959d8 a2=90 a3=0 items=0 ppid=25776 pid=25788 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744635001.989:3515): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336623332333932333830326631303138333662633963386534343636 type=BPF msg=audit(1744635001.989:3516): prog-id=0 op=UNLOAD type=BPF msg=audit(1744635001.990:3517): prog-id=0 op=UNLOAD type=BPF msg=audit(1744635001.990:3518): prog-id=265 op=LOAD type=SYSCALL msg=audit(1744635001.990:3518): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000195eb0 a2=90 a3=0 items=0 ppid=25776 pid=25788 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744635001.990:3518): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336623332333932333830326631303138333662633963386534343636 type=BPF msg=audit(1744635002.119:3519): prog-id=266 op=LOAD type=SYSCALL msg=audit(1744635002.119:3519): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001c7c48 a2=90 a3=0 items=0 ppid=25776 pid=25821 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744635002.119:3519): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6361326461313533353030656131363765326362643465366231343462 type=BPF msg=audit(1744635002.120:3520): prog-id=267 op=LOAD type=SYSCALL msg=audit(1744635002.120:3520): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c0001c79d8 a2=90 a3=0 items=0 ppid=25776 pid=25821 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744635002.120:3520): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6361326461313533353030656131363765326362643465366231343462 type=BPF msg=audit(1744635002.120:3521): prog-id=0 op=UNLOAD type=BPF msg=audit(1744635002.120:3522): prog-id=0 op=UNLOAD type=BPF msg=audit(1744635002.120:3523): prog-id=268 op=LOAD type=SYSCALL msg=audit(1744635002.120:3523): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001c7eb0 a2=90 a3=0 items=0 ppid=25776 pid=25821 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744635002.120:3523): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6361326461313533353030656131363765326362643465366231343462 type=NETFILTER_CFG msg=audit(1744635002.303:3524): table=mangle family=10 entries=10 op=xt_replace pid=25885 subj=system_u:system_r:spc_t:s0 comm="ip6tables" type=SYSCALL msg=audit(1744635002.303:3524): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=561675ae41b0 items=0 ppid=25833 pid=25885 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744635002.303:3524): proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 type=NETFILTER_CFG msg=audit(1744635002.304:3525): table=nat family=10 entries=19 op=xt_replace pid=25887 subj=system_u:system_r:spc_t:s0 comm="ip6tables" type=SYSCALL msg=audit(1744635002.304:3525): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55645aab55a0 items=0 ppid=25833 pid=25887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744635002.304:3525): proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 type=NETFILTER_CFG msg=audit(1744635002.305:3526): table=filter family=10 entries=11 op=xt_replace pid=25888 subj=system_u:system_r:spc_t:s0 comm="ip6tables" type=SYSCALL msg=audit(1744635002.305:3526): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55c245681760 items=0 ppid=25833 pid=25888 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744635002.305:3526): proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 type=NETFILTER_CFG msg=audit(1744635002.403:3527): table=mangle family=2 entries=10 op=xt_replace pid=25886 subj=system_u:system_r:spc_t:s0 comm="iptables" type=SYSCALL msg=audit(1744635002.403:3527): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55ca29ab9f40 items=0 ppid=25833 pid=25886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744635002.403:3527): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 type=NETFILTER_CFG msg=audit(1744635002.405:3528): table=nat family=2 entries=25 op=xt_replace pid=25889 subj=system_u:system_r:spc_t:s0 comm="iptables" type=SYSCALL msg=audit(1744635002.405:3528): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=555cc569b820 items=0 ppid=25833 pid=25889 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744635002.405:3528): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 type=NETFILTER_CFG msg=audit(1744635002.406:3529): table=filter family=2 entries=31 op=xt_replace pid=25890 subj=system_u:system_r:spc_t:s0 comm="iptables" type=SYSCALL msg=audit(1744635002.406:3529): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55ce41f6b260 items=0 ppid=25833 pid=25890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744635002.406:3529): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 type=NETFILTER_CFG msg=audit(1744635002.410:3530): table=filter family=2 entries=33 op=xt_replace pid=25891 subj=system_u:system_r:spc_t:s0 comm="iptables" type=SYSCALL msg=audit(1744635002.410:3530): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=5559398ea440 items=0 ppid=25833 pid=25891 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744635002.410:3530): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 type=NETFILTER_CFG msg=audit(1744635002.413:3531): table=filter family=2 entries=35 op=xt_replace pid=25893 subj=system_u:system_r:spc_t:s0 comm="iptables" type=SYSCALL msg=audit(1744635002.413:3531): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=557b614f1770 items=0 ppid=25833 pid=25893 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744635002.413:3531): proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 type=NETFILTER_CFG msg=audit(1744635002.417:3532): table=filter family=2 entries=36 op=xt_replace pid=25896 subj=system_u:system_r:spc_t:s0 comm="iptables" type=SYSCALL msg=audit(1744635002.417:3532): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=557ff696eca0 items=0 ppid=25833 pid=25896 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744635002.417:3532): proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 type=NETFILTER_CFG msg=audit(1744635002.418:3533): table=filter family=2 entries=37 op=xt_replace pid=25897 subj=system_u:system_r:spc_t:s0 comm="iptables" type=SYSCALL msg=audit(1744635002.418:3533): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=5625156180b0 items=0 ppid=25833 pid=25897 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744635002.418:3533): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 type=NETFILTER_CFG msg=audit(1744635002.421:3534): table=filter family=2 entries=39 op=xt_replace pid=25899 subj=system_u:system_r:spc_t:s0 comm="iptables" type=SYSCALL msg=audit(1744635002.421:3534): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55c080142940 items=0 ppid=25833 pid=25899 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744635002.421:3534): proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 type=NETFILTER_CFG msg=audit(1744635002.422:3535): table=filter family=2 entries=40 op=xt_replace pid=25900 subj=system_u:system_r:spc_t:s0 comm="iptables" type=SYSCALL msg=audit(1744635002.422:3535): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55ea7d5ae640 items=0 ppid=25833 pid=25900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744635002.422:3535): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 type=NETFILTER_CFG msg=audit(1744635002.424:3536): table=filter family=2 entries=42 op=xt_replace pid=25902 subj=system_u:system_r:spc_t:s0 comm="iptables" type=SYSCALL msg=audit(1744635002.424:3536): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55950ede6980 items=0 ppid=25833 pid=25902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744635002.424:3536): proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D type=NETFILTER_CFG msg=audit(1744635002.428:3537): table=filter family=2 entries=43 op=xt_replace pid=25905 subj=system_u:system_r:spc_t:s0 comm="iptables" type=SYSCALL msg=audit(1744635002.428:3537): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55bd35370ed0 items=0 ppid=25833 pid=25905 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744635002.428:3537): proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 type=NETFILTER_CFG msg=audit(1744635002.429:3538): table=filter family=2 entries=44 op=xt_replace pid=25906 subj=system_u:system_r:spc_t:s0 comm="iptables" type=SYSCALL msg=audit(1744635002.429:3538): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55877507d2c0 items=0 ppid=25833 pid=25906 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744635002.429:3538): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 type=NETFILTER_CFG msg=audit(1744635002.431:3539): table=filter family=2 entries=46 op=xt_replace pid=25908 subj=system_u:system_r:spc_t:s0 comm="iptables" type=SYSCALL msg=audit(1744635002.431:3539): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=5592dc747b40 items=0 ppid=25833 pid=25908 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744635002.431:3539): proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 type=NETFILTER_CFG msg=audit(1744635002.432:3540): table=nat family=2 entries=27 op=xt_replace pid=25909 subj=system_u:system_r:spc_t:s0 comm="iptables" type=SYSCALL msg=audit(1744635002.432:3540): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55bb5fc309f0 items=0 ppid=25833 pid=25909 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744635002.432:3540): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 type=NETFILTER_CFG msg=audit(1744635002.435:3541): table=nat family=2 entries=29 op=xt_replace pid=25911 subj=system_u:system_r:spc_t:s0 comm="iptables" type=SYSCALL msg=audit(1744635002.435:3541): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=5598c42a4280 items=0 ppid=25833 pid=25911 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744635002.435:3541): proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 type=NETFILTER_CFG msg=audit(1744635002.438:3542): table=nat family=2 entries=30 op=xt_replace pid=25914 subj=system_u:system_r:spc_t:s0 comm="iptables" type=SYSCALL msg=audit(1744635002.438:3542): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=561c31944630 items=0 ppid=25833 pid=25914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744635002.438:3542): proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 type=NETFILTER_CFG msg=audit(1744635002.459:3543): table=filter family=2 entries=47 op=xt_replace pid=25920 subj=system_u:system_r:spc_t:s0 comm="iptables-restor" type=SYSCALL msg=audit(1744635002.459:3543): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55f552c6a2b0 items=0 ppid=25833 pid=25920 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744635002.459:3543): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 type=NETFILTER_CFG msg=audit(1744635002.466:3544): table=nat family=2 entries=31 op=xt_replace pid=25920 subj=system_u:system_r:spc_t:s0 comm="iptables-restor" type=SYSCALL msg=audit(1744635002.466:3544): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55f552c6c7c0 items=0 ppid=25833 pid=25920 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744635002.466:3544): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 type=NETFILTER_CFG msg=audit(1744635002.467:3545): table=filter family=10 entries=13 op=xt_replace pid=25923 subj=system_u:system_r:spc_t:s0 comm="ip6tables" type=SYSCALL msg=audit(1744635002.467:3545): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55d1158159a0 items=0 ppid=25833 pid=25923 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744635002.467:3545): proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 type=NETFILTER_CFG msg=audit(1744635002.470:3546): table=filter family=10 entries=15 op=xt_replace pid=25925 subj=system_u:system_r:spc_t:s0 comm="ip6tables" type=SYSCALL msg=audit(1744635002.470:3546): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=555f9b9f5d90 items=0 ppid=25833 pid=25925 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744635002.470:3546): proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 type=NETFILTER_CFG msg=audit(1744635002.473:3547): table=filter family=10 entries=16 op=xt_replace pid=25928 subj=system_u:system_r:spc_t:s0 comm="ip6tables" type=SYSCALL msg=audit(1744635002.473:3547): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55591d319320 items=0 ppid=25833 pid=25928 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744635002.473:3547): proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 type=NETFILTER_CFG msg=audit(1744635002.474:3548): table=filter family=10 entries=17 op=xt_replace pid=25929 subj=system_u:system_r:spc_t:s0 comm="ip6tables" type=SYSCALL msg=audit(1744635002.474:3548): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=56059a872760 items=0 ppid=25833 pid=25929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744635002.474:3548): proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 type=NETFILTER_CFG msg=audit(1744635002.477:3549): table=filter family=10 entries=19 op=xt_replace pid=25931 subj=system_u:system_r:spc_t:s0 comm="ip6tables" type=SYSCALL msg=audit(1744635002.477:3549): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=56057420b0b0 items=0 ppid=25833 pid=25931 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744635002.477:3549): proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 type=NETFILTER_CFG msg=audit(1744635002.478:3550): table=filter family=10 entries=20 op=xt_replace pid=25932 subj=system_u:system_r:spc_t:s0 comm="ip6tables" type=SYSCALL msg=audit(1744635002.478:3550): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=5643f2f86dd0 items=0 ppid=25833 pid=25932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744635002.478:3550): proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 type=NETFILTER_CFG msg=audit(1744635002.480:3551): table=filter family=10 entries=22 op=xt_replace pid=25934 subj=system_u:system_r:spc_t:s0 comm="ip6tables" type=SYSCALL msg=audit(1744635002.480:3551): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=557d0c2d31c0 items=0 ppid=25833 pid=25934 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744635002.480:3551): proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 type=NETFILTER_CFG msg=audit(1744635002.484:3552): table=filter family=10 entries=23 op=xt_replace pid=25937 subj=system_u:system_r:spc_t:s0 comm="ip6tables" type=SYSCALL msg=audit(1744635002.484:3552): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55ff6d845770 items=0 ppid=25833 pid=25937 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744635002.484:3552): proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D type=NETFILTER_CFG msg=audit(1744635002.485:3553): table=filter family=10 entries=24 op=xt_replace pid=25938 subj=system_u:system_r:spc_t:s0 comm="ip6tables" type=SYSCALL msg=audit(1744635002.485:3553): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55680f50cb90 items=0 ppid=25833 pid=25938 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744635002.485:3553): proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 type=NETFILTER_CFG msg=audit(1744635002.487:3554): table=filter family=10 entries=26 op=xt_replace pid=25940 subj=system_u:system_r:spc_t:s0 comm="ip6tables" type=SYSCALL msg=audit(1744635002.487:3554): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55c14e5bd4e0 items=0 ppid=25833 pid=25940 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744635002.487:3554): proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 type=NETFILTER_CFG msg=audit(1744635002.488:3555): table=nat family=10 entries=21 op=xt_replace pid=25941 subj=system_u:system_r:spc_t:s0 comm="ip6tables" type=SYSCALL msg=audit(1744635002.488:3555): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55de7bac27e0 items=0 ppid=25833 pid=25941 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744635002.488:3555): proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 type=NETFILTER_CFG msg=audit(1744635002.491:3556): table=nat family=10 entries=23 op=xt_replace pid=25943 subj=system_u:system_r:spc_t:s0 comm="ip6tables" type=SYSCALL msg=audit(1744635002.491:3556): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=5647f3f4e140 items=0 ppid=25833 pid=25943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744635002.491:3556): proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 type=NETFILTER_CFG msg=audit(1744635002.495:3557): table=nat family=10 entries=24 op=xt_replace pid=25946 subj=system_u:system_r:spc_t:s0 comm="ip6tables" type=SYSCALL msg=audit(1744635002.495:3557): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=5576a335a570 items=0 ppid=25833 pid=25946 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744635002.495:3557): proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 type=NETFILTER_CFG msg=audit(1744635002.503:3558): table=filter family=10 entries=27 op=xt_replace pid=25952 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto" type=SYSCALL msg=audit(1744635002.503:3558): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55b8613a0930 items=0 ppid=25833 pid=25952 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744635002.503:3558): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 type=NETFILTER_CFG msg=audit(1744635002.503:3559): table=nat family=10 entries=25 op=xt_replace pid=25952 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto" type=SYSCALL msg=audit(1744635002.503:3559): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55b8613a2910 items=0 ppid=25833 pid=25952 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744635002.503:3559): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 type=CRYPTO_KEY_USER msg=audit(1744635055.241:3560): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15296 suid=1000 rport=46008 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744635055.242:3561): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=15296 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744635055.245:3562): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" type=CRED_DISP msg=audit(1744635055.245:3563): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744635055.245:3564): pid=15288 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=15288 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=SERVICE_STOP msg=audit(1744635065.376:3565): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1744635065.395:3566): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1744635124.130:3567): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sssd-kcm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1744635517.499:3568): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-tmpfiles-clean comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1744635517.499:3569): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-tmpfiles-clean comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744636205.202:3570): pid=26107 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=26107 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1744636205.203:3571): pid=26106 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=26107 suid=74 rport=43562 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1744636205.203:3572): pid=26106 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=26107 suid=74 rport=43562 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1744636205.267:3573): pid=26106 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744636205.267:3574): pid=26106 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1744636205.302:3575): pid=26106 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744636205.303:3576): pid=26106 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26107 suid=74 rport=43562 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1744636205.304:3577): pid=26106 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1744636205.304:3578): pid=26106 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=26 res=1UID="root" OLD-AUID="unset" AUID="rocky" type=SYSCALL msg=audit(1744636205.304:3578): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7fffec13da40 a2=4 a3=3e8 items=0 ppid=12346 pid=26106 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636205.304:3578): proctitle=737368643A20726F636B79205B707269765D type=USER_ROLE_CHANGE msg=audit(1744636205.305:3579): pid=26106 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=SERVICE_START msg=audit(1744636205.335:3580): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1744636205.377:3581): pid=26110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRED_ACQ msg=audit(1744636205.377:3582): pid=26110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="rocky" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=USER_ROLE_CHANGE msg=audit(1744636205.377:3583): pid=26110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1744636205.378:3584): pid=26110 uid=0 subj=system_u:system_r:init_t:s0 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=27 res=1UID="root" OLD-AUID="unset" AUID="rocky" type=SYSCALL msg=audit(1744636205.378:3584): arch=c000003e syscall=1 success=yes exit=4 a0=7 a1=7ffe2f7afdf0 a2=4 a3=3e8 items=0 ppid=1 pid=26110 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="(systemd)" exe="/usr/lib/systemd/systemd" subj=system_u:system_r:init_t:s0 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636205.378:3584): proctitle="(systemd)" type=USER_START msg=audit(1744636205.379:3585): pid=26110 uid=0 auid=1000 ses=27 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="rocky" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" type=SERVICE_START msg=audit(1744636205.468:3586): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1744636205.487:3587): pid=26106 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636205.489:3588): pid=26122 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=26122 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=CRED_ACQ msg=audit(1744636205.490:3589): pid=26122 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_LOGIN msg=audit(1744636205.534:3590): pid=26106 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636205.534:3591): pid=26106 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636205.536:3592): pid=26106 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=26123 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636205.834:3593): pid=26106 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26122 suid=1000 rport=43562 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636205.834:3594): pid=26106 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=26122 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636205.836:3595): pid=26106 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=CRED_DISP msg=audit(1744636205.836:3596): pid=26106 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_END msg=audit(1744636205.837:3597): pid=26106 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636205.837:3598): pid=26106 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636205.837:3599): pid=26106 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=26106 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=CRYPTO_KEY_USER msg=audit(1744636205.853:3600): pid=26138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=26138 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1744636205.854:3601): pid=26137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=26138 suid=74 rport=43572 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1744636205.855:3602): pid=26137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=26138 suid=74 rport=43572 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1744636205.916:3603): pid=26137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744636205.916:3604): pid=26137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1744636205.950:3605): pid=26137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744636205.950:3606): pid=26137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26138 suid=74 rport=43572 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1744636205.952:3607): pid=26137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1744636205.952:3608): pid=26137 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=28 res=1UID="root" OLD-AUID="unset" AUID="rocky" type=SYSCALL msg=audit(1744636205.952:3608): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffd9f6ada90 a2=4 a3=3e8 items=0 ppid=12346 pid=26137 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636205.952:3608): proctitle=737368643A20726F636B79205B707269765D type=USER_ROLE_CHANGE msg=audit(1744636205.953:3609): pid=26137 uid=0 auid=1000 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_START msg=audit(1744636205.977:3610): pid=26137 uid=0 auid=1000 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636205.978:3611): pid=26141 uid=0 auid=1000 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=26141 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=CRED_ACQ msg=audit(1744636205.979:3612): pid=26141 uid=0 auid=1000 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_LOGIN msg=audit(1744636206.022:3613): pid=26137 uid=0 auid=1000 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636206.022:3614): pid=26137 uid=0 auid=1000 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636206.023:3615): pid=26137 uid=0 auid=1000 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=26142 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636218.461:3616): pid=26490 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=26490 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1744636218.462:3617): pid=26489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=26490 suid=74 rport=34224 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1744636218.462:3618): pid=26489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=26490 suid=74 rport=34224 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1744636218.569:3619): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sssd-kcm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_AUTH msg=audit(1744636218.606:3620): pid=26489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744636218.606:3621): pid=26489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:70:6d:53:7b:b9:b1:0c:0b:97:46:57:0a:90:24:61:0d:60:dd:24:ba:9a:35:b7:5d:bd:60:94:bc:89:4a:f4:2f exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1744636218.639:3622): pid=26489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744636218.639:3623): pid=26489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26490 suid=74 rport=34224 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1744636218.641:3624): pid=26489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1744636218.641:3625): pid=26489 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=29 res=1UID="root" OLD-AUID="unset" AUID="rocky" type=SYSCALL msg=audit(1744636218.641:3625): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffe860c8990 a2=4 a3=3e8 items=0 ppid=12346 pid=26489 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636218.641:3625): proctitle=737368643A20726F636B79205B707269765D type=USER_ROLE_CHANGE msg=audit(1744636218.642:3626): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_START msg=audit(1744636218.661:3627): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636218.662:3628): pid=26497 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=26497 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=CRED_ACQ msg=audit(1744636218.663:3629): pid=26497 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_LOGIN msg=audit(1744636218.678:3630): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636218.678:3631): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636218.679:3632): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=26498 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636218.696:3633): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636218.696:3634): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636218.707:3635): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636218.707:3636): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636218.708:3637): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=26512 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636218.730:3638): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636218.730:3639): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636218.742:3640): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636218.742:3641): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636218.743:3642): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=26532 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636218.763:3643): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636218.763:3644): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636218.774:3645): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636218.774:3646): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636218.775:3647): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=26548 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636218.822:3648): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636218.822:3649): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636218.839:3650): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636218.839:3651): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636218.840:3652): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=26564 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636218.882:3653): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636218.882:3654): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636218.897:3655): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636218.897:3656): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636218.898:3657): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=26578 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636218.918:3658): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636218.918:3659): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636218.930:3660): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636218.930:3661): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636218.932:3662): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=26593 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636218.987:3663): pid=26608 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636218.987:3664): pid=26608 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C69737461716C75687665766D676D67787266707A676778646275746E626977203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363231382E363938363732332D32363438372D3233313937313735383432303234382F416E736962616C6C5A5F73657475702E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636218.988:3665): pid=26608 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636218.992:3666): pid=26608 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636219.581:3667): pid=26608 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636219.581:3668): pid=26608 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636219.584:3669): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636219.584:3670): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636219.599:3671): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636219.599:3672): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636219.600:3673): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=26645 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636219.621:3674): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636219.621:3675): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636219.971:3676): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636219.971:3677): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636219.972:3678): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=26665 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636219.991:3679): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636219.991:3680): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636220.002:3681): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636220.002:3682): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636220.003:3683): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=26679 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636220.028:3684): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636220.028:3685): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636220.048:3686): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636220.048:3687): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636220.049:3688): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=26700 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636220.090:3689): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636220.090:3690): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636220.102:3691): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636220.102:3692): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636220.103:3693): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=26714 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636220.123:3694): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636220.123:3695): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636220.136:3696): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636220.136:3697): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636220.137:3698): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=26729 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636220.191:3699): pid=26744 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636220.191:3700): pid=26744 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D717468746E686F71636678617A696D747976766F6566787974756D74697A7063203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363231392E3939333530332D32363636332D3131333735383532303038383936342F416E736962616C6C5A5F73657475702E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636220.192:3701): pid=26744 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636220.194:3702): pid=26744 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636220.802:3703): pid=26744 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636220.802:3704): pid=26744 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636220.805:3705): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636220.805:3706): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636220.822:3707): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636220.822:3708): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636220.823:3709): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=26781 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636220.846:3710): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636220.846:3711): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636222.134:3712): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636222.134:3713): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636222.135:3714): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=26810 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636222.155:3715): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636222.155:3716): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636222.165:3717): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636222.165:3718): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636222.166:3719): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=26824 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636222.190:3720): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636222.190:3721): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636222.331:3722): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636222.331:3723): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636222.332:3724): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=26845 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636222.360:3725): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636222.360:3726): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636222.372:3727): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636222.372:3728): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636222.373:3729): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=26859 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636222.392:3730): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636222.392:3731): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636222.403:3732): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636222.403:3733): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636222.404:3734): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=26874 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636222.460:3735): pid=26889 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636222.460:3736): pid=26889 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D79656A6D776F62646A617A70636172706E7A6D746D7262656C79616A78726679203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363232322E3135363939342D32363830382D34333533353131333131303231372F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636222.461:3737): pid=26889 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636222.463:3738): pid=26889 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636222.655:3739): pid=26889 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636222.655:3740): pid=26889 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636222.658:3741): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636222.658:3742): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636222.668:3743): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636222.669:3744): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636222.669:3745): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=26893 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636222.688:3746): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636222.688:3747): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636222.937:3748): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636222.937:3749): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636222.938:3750): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=26910 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636222.957:3751): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636222.957:3752): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636222.969:3753): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636222.969:3754): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636222.970:3755): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=26924 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636222.992:3756): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636222.992:3757): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636223.007:3758): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636223.007:3759): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636223.008:3760): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=26945 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636223.038:3761): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636223.038:3762): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636223.049:3763): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636223.050:3764): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636223.050:3765): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=26959 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636223.071:3766): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636223.071:3767): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636223.083:3768): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636223.083:3769): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636223.085:3770): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=26974 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636223.137:3771): pid=26989 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636223.137:3772): pid=26989 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6669616B686673676C656E74667477686B6A7269726367617A69636865786466203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363232322E393538393430372D32363930382D3231353634353338303734343931392F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636223.138:3773): pid=26989 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636223.139:3774): pid=26989 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636223.309:3775): pid=26989 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636223.309:3776): pid=26989 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636223.311:3777): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636223.311:3778): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636223.322:3779): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636223.322:3780): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636223.323:3781): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=26993 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636223.342:3782): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636223.342:3783): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636223.599:3784): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636223.599:3785): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636223.601:3786): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=27010 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636223.620:3787): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636223.620:3788): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636223.630:3789): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636223.630:3790): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636223.631:3791): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=27024 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636223.654:3792): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636223.654:3793): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636223.792:3794): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636223.792:3795): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636223.793:3796): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=27045 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636223.822:3797): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636223.822:3798): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636223.834:3799): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636223.834:3800): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636223.835:3801): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=27059 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636223.854:3802): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636223.854:3803): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636223.865:3804): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636223.865:3805): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636223.866:3806): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=27074 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636223.922:3807): pid=27089 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636223.922:3808): pid=27089 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A656C6A6C6E747567697A6164696E7169646B73666F67626A666578756C6A68203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363232332E363231383737342D32373030382D3234303030373132373633373839302F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636223.923:3809): pid=27089 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636223.924:3810): pid=27089 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636224.087:3811): pid=27089 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636224.087:3812): pid=27089 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636224.089:3813): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636224.089:3814): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636224.104:3815): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636224.104:3816): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636224.105:3817): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=27094 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636224.126:3818): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636224.126:3819): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636224.137:3820): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636224.137:3821): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636224.138:3822): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=27108 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636224.156:3823): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636224.156:3824): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636224.312:3825): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636224.312:3826): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636224.314:3827): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=27125 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636224.342:3828): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636224.342:3829): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636224.353:3830): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636224.353:3831): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636224.354:3832): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=27139 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636224.372:3833): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636224.372:3834): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636224.382:3835): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636224.383:3836): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636224.384:3837): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=27154 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636224.435:3838): pid=27169 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636224.435:3839): pid=27169 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A746C6A6D777A64796561626C716263637A7364656C69746B7564637A6D7977203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363232332E363231383737342D32373030382D3234303030373132373633373839302F416E736962616C6C5A5F636F70792E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636224.435:3840): pid=27169 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636224.436:3841): pid=27169 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636224.614:3842): pid=27169 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636224.614:3843): pid=27169 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636224.617:3844): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636224.617:3845): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636224.628:3846): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636224.628:3847): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636224.629:3848): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=27173 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636224.649:3849): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636224.649:3850): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636224.902:3851): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636224.902:3852): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636224.904:3853): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=27190 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636224.924:3854): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636224.924:3855): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636224.935:3856): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636224.935:3857): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636224.936:3858): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=27204 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636224.959:3859): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636224.959:3860): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636224.994:3861): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636224.994:3862): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636224.995:3863): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=27225 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636225.025:3864): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636225.025:3865): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636225.037:3866): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636225.037:3867): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636225.038:3868): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=27239 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636225.057:3869): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636225.057:3870): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636225.068:3871): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636225.068:3872): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636225.069:3873): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=27254 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636225.123:3874): pid=27269 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636225.124:3875): pid=27269 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F666C6B656B796F79796D6E6B65736362686B6F6F647169626C646C6E6F626E203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363232342E393235373634332D32373138382D33363735303233333633303137312F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636225.124:3876): pid=27269 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636225.126:3877): pid=27269 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636225.283:3878): pid=27269 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636225.284:3879): pid=27269 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636225.286:3880): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636225.286:3881): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636225.301:3882): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636225.301:3883): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636225.302:3884): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=27274 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636225.324:3885): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636225.324:3886): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636225.335:3887): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636225.335:3888): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636225.336:3889): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=27288 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636225.357:3890): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636225.357:3891): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636225.375:3892): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636225.375:3893): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636225.376:3894): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=27304 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636225.408:3895): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636225.408:3896): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636225.419:3897): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636225.419:3898): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636225.420:3899): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=27318 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636225.441:3900): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636225.441:3901): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636225.453:3902): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636225.453:3903): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636225.454:3904): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=27333 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636225.510:3905): pid=27348 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636225.510:3906): pid=27348 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A767873696C747A61787A65627161746C6E70766B736A666C74646A65617863203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363232342E393235373634332D32373138382D33363735303233333633303137312F416E736962616C6C5A5F636F70792E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636225.510:3907): pid=27348 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636225.512:3908): pid=27348 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636225.678:3909): pid=27348 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636225.678:3910): pid=27348 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636225.680:3911): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636225.680:3912): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636225.692:3913): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636225.692:3914): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636225.693:3915): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=27352 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636225.712:3916): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636225.712:3917): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636226.199:3918): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636226.199:3919): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636226.200:3920): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=27371 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636226.221:3921): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636226.221:3922): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636226.233:3923): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636226.233:3924): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636226.234:3925): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=27385 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636226.259:3926): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636226.259:3927): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636226.385:3928): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636226.385:3929): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636226.386:3930): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=27406 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636226.415:3931): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636226.415:3932): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636226.426:3933): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636226.426:3934): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636226.427:3935): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=27420 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636226.446:3936): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636226.446:3937): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636226.457:3938): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636226.457:3939): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636226.458:3940): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=27435 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636226.510:3941): pid=27450 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636226.510:3942): pid=27450 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D78796D786F7A736A626F67617475727767687975796C6E677871686D6D6D7A65203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363232362E323233343433332D32373336392D31323139353737333837323136382F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636226.510:3943): pid=27450 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636226.512:3944): pid=27450 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636233.084:3945): pid=27450 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636233.084:3946): pid=27450 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636233.087:3947): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636233.087:3948): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636233.100:3949): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636233.100:3950): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636233.101:3951): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=27514 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636233.119:3952): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636233.119:3953): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636233.386:3954): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636233.386:3955): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636233.387:3956): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=27530 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636233.404:3957): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636233.404:3958): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636233.414:3959): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636233.414:3960): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636233.415:3961): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=27544 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636233.435:3962): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636233.435:3963): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636233.450:3964): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636233.450:3965): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636233.451:3966): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=27565 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636233.479:3967): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636233.479:3968): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636233.490:3969): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636233.490:3970): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636233.491:3971): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=27579 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636233.509:3972): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636233.509:3973): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636233.522:3974): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636233.522:3975): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636233.524:3976): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=27594 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636233.576:3977): pid=27609 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636233.576:3978): pid=27609 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D776372746F75726D636C6379766C6476726C6C726E686D786962666E73756E7A203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363233332E3430353938382D32373336392D3139363934333839353536373533302F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636233.577:3979): pid=27609 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636233.579:3980): pid=27609 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636234.225:3981): pid=27609 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636234.225:3982): pid=27609 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636234.227:3983): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636234.227:3984): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636234.239:3985): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636234.239:3986): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636234.240:3987): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=27632 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636234.259:3988): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636234.259:3989): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636234.501:3990): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636234.501:3991): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636234.502:3992): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=27648 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636234.520:3993): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636234.520:3994): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636234.531:3995): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636234.531:3996): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636234.532:3997): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=27662 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636234.554:3998): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636234.554:3999): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636234.570:4000): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636234.570:4001): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636234.571:4002): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=27683 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636234.601:4003): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636234.601:4004): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636234.612:4005): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636234.612:4006): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636234.613:4007): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=27697 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636234.634:4008): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636234.634:4009): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636234.645:4010): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636234.645:4011): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636234.646:4012): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=27712 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636234.700:4013): pid=27727 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636234.700:4014): pid=27727 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A67626A69757864756B676F7871727672686E66677469736665766179757A7A203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363233342E3532323034392D32373634362D3136313833393535373233303839362F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636234.701:4015): pid=27727 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636234.702:4016): pid=27727 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636234.872:4017): pid=27727 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636234.872:4018): pid=27727 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636234.875:4019): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636234.875:4020): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636234.886:4021): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636234.886:4022): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636234.887:4023): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=27731 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636234.906:4024): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636234.906:4025): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636235.355:4026): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636235.355:4027): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636235.356:4028): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=27750 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636235.373:4029): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636235.373:4030): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636235.383:4031): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636235.383:4032): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636235.383:4033): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=27764 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636235.404:4034): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636235.404:4035): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636235.507:4036): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636235.507:4037): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636235.508:4038): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=27785 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636235.536:4039): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636235.536:4040): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636235.547:4041): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636235.547:4042): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636235.548:4043): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=27799 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636235.566:4044): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636235.566:4045): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636235.576:4046): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636235.576:4047): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636235.577:4048): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=27814 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636235.630:4049): pid=27829 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636235.630:4050): pid=27829 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A73646F766C7A6B666D7A7A64696768617479797668627961646D78736D6877203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363233352E3337343836352D32373734382D3232343432333937373938353637362F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636235.630:4051): pid=27829 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636235.632:4052): pid=27829 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636235.788:4053): pid=27829 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636235.788:4054): pid=27829 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636235.791:4055): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636235.791:4056): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636235.807:4057): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636235.807:4058): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636235.808:4059): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=27834 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636235.828:4060): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636235.828:4061): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636235.840:4062): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636235.840:4063): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636235.841:4064): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=27848 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636235.861:4065): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636235.861:4066): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636235.878:4067): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636235.878:4068): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636235.879:4069): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=27864 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636235.910:4070): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636235.910:4071): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636235.921:4072): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636235.921:4073): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636235.922:4074): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=27878 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636235.942:4075): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636235.942:4076): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636235.953:4077): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636235.953:4078): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636235.954:4079): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=27893 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636236.009:4080): pid=27908 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636236.009:4081): pid=27908 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D64616E67766B6F6E6A70776F757975726966646E716B79746F6F726363727175203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363233352E3337343836352D32373734382D3232343432333937373938353637362F416E736962616C6C5A5F636F70792E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636236.010:4082): pid=27908 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636236.011:4083): pid=27908 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636236.182:4084): pid=27908 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636236.183:4085): pid=27908 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636236.185:4086): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636236.185:4087): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636236.197:4088): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636236.197:4089): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636236.198:4090): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=27912 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636236.217:4091): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636236.217:4092): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636236.464:4093): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636236.464:4094): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636236.465:4095): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=27929 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636236.484:4096): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636236.484:4097): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636236.495:4098): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636236.495:4099): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636236.496:4100): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=27943 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636236.519:4101): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636236.519:4102): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636236.652:4103): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636236.652:4104): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636236.653:4105): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=27964 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636236.686:4106): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636236.686:4107): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636236.697:4108): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636236.697:4109): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636236.698:4110): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=27978 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636236.717:4111): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636236.717:4112): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636236.728:4113): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636236.728:4114): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636236.729:4115): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=27993 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636236.781:4116): pid=28008 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636236.781:4117): pid=28008 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd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exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636236.782:4118): pid=28008 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636236.784:4119): pid=28008 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=BPF msg=audit(1744636238.992:4120): prog-id=269 op=LOAD type=BPF msg=audit(1744636238.993:4121): prog-id=270 op=LOAD type=SYSCALL msg=audit(1744636238.993:4121): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000219ad0 a2=90 a3=0 items=0 ppid=28299 pid=28309 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636238.993:4121): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31316336356663633930636563393632653639396465343532 type=BPF msg=audit(1744636238.994:4122): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636238.994:4123): prog-id=271 op=LOAD type=SYSCALL msg=audit(1744636238.994:4123): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000219c48 a2=90 a3=0 items=0 ppid=28299 pid=28309 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636238.994:4123): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31316336356663633930636563393632653639396465343532 type=BPF msg=audit(1744636238.994:4124): prog-id=272 op=LOAD type=SYSCALL msg=audit(1744636238.994:4124): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0002199d8 a2=90 a3=0 items=0 ppid=28299 pid=28309 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636238.994:4124): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31316336356663633930636563393632653639396465343532 type=BPF msg=audit(1744636238.994:4125): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636238.994:4126): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636238.994:4127): prog-id=273 op=LOAD type=SYSCALL msg=audit(1744636238.994:4127): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000219eb0 a2=90 a3=0 items=0 ppid=28299 pid=28309 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636238.994:4127): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31316336356663633930636563393632653639396465343532 type=USER_END msg=audit(1744636239.110:4128): pid=28008 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636239.110:4129): pid=28008 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636239.113:4130): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636239.113:4131): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636239.127:4132): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636239.127:4133): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636239.128:4134): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=28391 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636239.150:4135): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636239.150:4136): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636239.650:4137): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636239.650:4138): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636239.651:4139): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=28425 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636239.669:4140): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636239.669:4141): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636239.679:4142): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636239.680:4143): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636239.681:4144): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=28439 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636239.703:4145): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636239.704:4146): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636239.720:4147): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636239.720:4148): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636239.721:4149): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=28460 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636239.752:4150): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636239.752:4151): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636239.763:4152): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636239.763:4153): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636239.764:4154): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=28474 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636239.784:4155): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636239.784:4156): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636239.796:4157): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636239.796:4158): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636239.797:4159): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=28489 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636239.849:4160): pid=28504 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636239.850:4161): pid=28504 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D68646564756C726173686C736A6C646C7665766E77786E6F75737273647178203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363233392E3637303836372D32383432332D38313834313532323230313635362F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636239.850:4162): pid=28504 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636239.852:4163): pid=28504 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636244.163:4164): pid=28504 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636244.163:4165): pid=28504 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636244.166:4166): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636244.166:4167): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636244.176:4168): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636244.176:4169): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636244.177:4170): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=28530 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636244.198:4171): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636244.198:4172): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636244.431:4173): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636244.431:4174): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636244.432:4175): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=28546 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636244.451:4176): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636244.451:4177): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636244.461:4178): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636244.461:4179): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636244.462:4180): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=28560 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636244.484:4181): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636244.484:4182): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636244.501:4183): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636244.501:4184): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636244.502:4185): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=28581 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636244.533:4186): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636244.533:4187): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636244.545:4188): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636244.545:4189): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636244.546:4190): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=28595 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636244.570:4191): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636244.570:4192): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636244.582:4193): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636244.582:4194): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636244.583:4195): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=28610 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636244.636:4196): pid=28625 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636244.636:4197): pid=28625 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D70626E74736664787A6B6A7A7A6A7866616C616A75647A776377737472667865203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363234342E343532383539322D32383432332D37343037363234353036353337312F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636244.637:4198): pid=28625 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636244.638:4199): pid=28625 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636249.212:4200): pid=28625 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636249.213:4201): pid=28625 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636249.215:4202): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636249.215:4203): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636249.226:4204): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636249.226:4205): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636249.227:4206): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=28650 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636249.252:4207): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636249.252:4208): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636249.515:4209): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636249.515:4210): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636249.516:4211): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=28665 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636249.533:4212): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636249.533:4213): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636249.543:4214): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636249.543:4215): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636249.544:4216): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=28679 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636249.567:4217): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636249.567:4218): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636249.584:4219): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636249.584:4220): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636249.585:4221): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=28700 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636249.615:4222): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636249.615:4223): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636249.628:4224): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636249.628:4225): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636249.629:4226): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=28714 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636249.649:4227): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636249.649:4228): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636249.659:4229): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636249.659:4230): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636249.660:4231): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=28729 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636249.711:4232): pid=28744 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636249.711:4233): pid=28744 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D636169647164616D6866756B6F687379737478636565797776767A6479617570203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363234392E353334393837372D32383432332D3139383738363532393233333730392F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636249.712:4234): pid=28744 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636249.713:4235): pid=28744 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636256.026:4236): pid=28744 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636256.026:4237): pid=28744 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636256.029:4238): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636256.029:4239): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636256.040:4240): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636256.041:4241): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636256.042:4242): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=28767 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636256.063:4243): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636256.063:4244): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636256.291:4245): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636256.292:4246): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636256.292:4247): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=28782 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636256.310:4248): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636256.310:4249): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636256.321:4250): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636256.321:4251): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636256.322:4252): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=28796 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636256.343:4253): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636256.343:4254): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636256.360:4255): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636256.360:4256): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636256.361:4257): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=28817 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636256.390:4258): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636256.390:4259): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636256.401:4260): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636256.401:4261): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636256.402:4262): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=28831 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636256.421:4263): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636256.422:4264): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636256.433:4265): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636256.433:4266): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636256.434:4267): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=28846 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636256.486:4268): pid=28861 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636256.486:4269): pid=28861 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D736B6A786E6661706661626C70797177666D6B706D6463756562767863786D6F203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363235362E333133333138352D32383432332D3233303739353538393233313332372F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636256.487:4270): pid=28861 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636256.488:4271): pid=28861 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636260.306:4272): pid=28861 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636260.307:4273): pid=28861 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636260.311:4274): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636260.311:4275): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636260.324:4276): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636260.324:4277): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636260.325:4278): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=28883 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636260.345:4279): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636260.345:4280): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636260.607:4281): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636260.607:4282): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636260.608:4283): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=28898 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636260.629:4284): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636260.629:4285): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636260.639:4286): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636260.639:4287): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636260.640:4288): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=28912 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636260.663:4289): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636260.663:4290): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636260.679:4291): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636260.679:4292): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636260.680:4293): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=28933 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636260.713:4294): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636260.713:4295): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636260.726:4296): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636260.726:4297): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636260.727:4298): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=28947 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636260.749:4299): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636260.749:4300): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636260.760:4301): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636260.760:4302): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636260.761:4303): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=28962 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636260.816:4304): pid=28977 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636260.816:4305): pid=28977 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6564676E79706A77627578617776677766676B776678686C6D70617A7A797A74203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363236302E363331323138322D32383432332D33333530323133353531323432322F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636260.817:4306): pid=28977 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636260.818:4307): pid=28977 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636262.956:4308): pid=28977 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636262.956:4309): pid=28977 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636262.959:4310): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636262.960:4311): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636262.970:4312): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636262.970:4313): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636262.971:4314): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=29000 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636262.992:4315): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636262.993:4316): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636263.288:4317): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636263.288:4318): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636263.289:4319): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=29015 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636263.306:4320): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636263.306:4321): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636263.317:4322): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636263.317:4323): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636263.319:4324): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=29029 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636263.341:4325): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636263.341:4326): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636263.358:4327): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636263.358:4328): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636263.359:4329): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=29050 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636263.387:4330): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636263.387:4331): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636263.399:4332): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636263.399:4333): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636263.400:4334): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=29064 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636263.419:4335): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636263.419:4336): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636263.430:4337): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636263.430:4338): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636263.431:4339): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=29079 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636263.483:4340): pid=29094 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636263.484:4341): pid=29094 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B63706F6D757A6D6A66727A6C7277707865706F7077766277627A6376697A6A203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363236332E333039333131362D32383432332D3138313137373833313438323531312F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636263.484:4342): pid=29094 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636263.486:4343): pid=29094 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636263.944:4344): pid=29094 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636263.944:4345): pid=29094 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636263.948:4346): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636263.948:4347): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636263.958:4348): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636263.958:4349): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636263.959:4350): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=29110 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636263.982:4351): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636263.982:4352): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636264.275:4353): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636264.275:4354): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636264.276:4355): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=29126 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636264.295:4356): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636264.296:4357): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636264.306:4358): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636264.306:4359): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636264.307:4360): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=29140 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636264.330:4361): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636264.330:4362): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636264.347:4363): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636264.347:4364): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636264.348:4365): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=29161 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636264.377:4366): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636264.377:4367): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636264.387:4368): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636264.387:4369): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636264.388:4370): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=29175 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636264.407:4371): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636264.407:4372): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636264.418:4373): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636264.418:4374): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636264.419:4375): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=29190 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636264.471:4376): pid=29205 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636264.471:4377): pid=29205 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6976696F796964706166757A6A6B646A766E6E7A746B6267677A76796863696C203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363236342E3239383435352D32393132342D3237333734343336323933313038362F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636264.472:4378): pid=29205 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636264.473:4379): pid=29205 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636264.648:4380): pid=29205 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636264.649:4381): pid=29205 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636264.651:4382): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636264.651:4383): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636264.662:4384): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636264.662:4385): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636264.663:4386): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=29209 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636264.683:4387): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636264.683:4388): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636266.036:4389): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636266.036:4390): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636266.037:4391): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=29242 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636266.057:4392): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636266.057:4393): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636266.069:4394): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636266.069:4395): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636266.070:4396): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=29256 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636266.094:4397): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636266.094:4398): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636266.110:4399): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636266.110:4400): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636266.111:4401): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=29277 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636266.139:4402): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636266.139:4403): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636266.150:4404): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636266.150:4405): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636266.151:4406): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=29291 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636266.170:4407): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636266.170:4408): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636266.181:4409): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636266.181:4410): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636266.182:4411): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=29306 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636266.234:4412): pid=29321 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636266.234:4413): pid=29321 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6579666A6B766762666F7961677867616666646E656E6679726567787A6A6E66203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363236362E303539393430332D32393234302D3131353735313532373232353839372F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636266.234:4414): pid=29321 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636266.236:4415): pid=29321 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636266.406:4416): pid=29321 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636266.406:4417): pid=29321 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636266.409:4418): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636266.409:4419): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636266.420:4420): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636266.420:4421): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636266.421:4422): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=29325 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636266.442:4423): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636266.442:4424): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636266.704:4425): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636266.704:4426): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636266.705:4427): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=29344 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636266.725:4428): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636266.725:4429): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636266.737:4430): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636266.737:4431): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636266.738:4432): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=29358 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636266.762:4433): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636266.762:4434): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636266.781:4435): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636266.781:4436): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636266.782:4437): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=29379 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636266.814:4438): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636266.814:4439): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636266.827:4440): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636266.827:4441): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636266.828:4442): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=29393 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636266.850:4443): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636266.850:4444): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636266.862:4445): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636266.862:4446): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636266.864:4447): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=29408 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636266.920:4448): pid=29423 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636266.920:4449): pid=29423 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7275786B666D78786773776964677879786166666773626D756476696B617A6F203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363236362E373238353133322D32393334322D3231363138363432343630323232322F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636266.921:4450): pid=29423 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636266.923:4451): pid=29423 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636267.134:4452): pid=29423 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636267.134:4453): pid=29423 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636267.136:4454): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636267.136:4455): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636267.148:4456): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636267.148:4457): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636267.149:4458): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=29427 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636267.171:4459): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636267.171:4460): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636267.551:4461): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636267.551:4462): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636267.554:4463): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=29444 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636267.573:4464): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636267.573:4465): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636267.584:4466): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636267.584:4467): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636267.585:4468): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=29458 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636267.608:4469): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636267.608:4470): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636267.763:4471): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636267.763:4472): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636267.764:4473): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=29479 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636267.793:4474): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636267.793:4475): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636267.804:4476): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636267.805:4477): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636267.806:4478): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=29493 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636267.826:4479): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636267.827:4480): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636267.838:4481): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636267.838:4482): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636267.839:4483): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=29508 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636267.892:4484): pid=29523 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636267.892:4485): pid=29523 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D797A76726E7570637861706A72707175666566627A7771737169757067646A69203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363236372E3537363230372D32393434322D3137343233333636363037343433362F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636267.892:4486): pid=29523 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636267.894:4487): pid=29523 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636268.071:4488): pid=29523 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636268.071:4489): pid=29523 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636268.074:4490): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636268.074:4491): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636268.086:4492): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636268.086:4493): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636268.087:4494): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=29527 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636268.106:4495): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636268.106:4496): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636268.311:4497): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636268.311:4498): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636268.312:4499): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=29543 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636268.330:4500): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636268.330:4501): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636268.340:4502): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636268.340:4503): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636268.341:4504): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=29557 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636268.364:4505): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636268.364:4506): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636268.381:4507): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636268.381:4508): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636268.382:4509): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=29578 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636268.412:4510): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636268.412:4511): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636268.423:4512): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636268.423:4513): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636268.424:4514): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=29592 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636268.445:4515): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636268.445:4516): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636268.459:4517): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636268.459:4518): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636268.460:4519): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=29607 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636268.513:4520): pid=29622 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636268.513:4521): pid=29622 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D72746D636A64747873717A6D71686D7166647571637061686F6661656F706F64203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363236382E333332373935362D32393434322D3233313339343439383336333233382F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636268.513:4522): pid=29622 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636268.515:4523): pid=29622 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636268.709:4524): pid=29622 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636268.709:4525): pid=29622 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636268.711:4526): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636268.712:4527): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636268.722:4528): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636268.722:4529): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636268.723:4530): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=29626 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636268.744:4531): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636268.744:4532): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636268.941:4533): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636268.941:4534): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636268.942:4535): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=29641 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636268.961:4536): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636268.961:4537): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636268.972:4538): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636268.972:4539): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636268.973:4540): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=29656 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636268.998:4541): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636268.998:4542): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636269.017:4543): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636269.017:4544): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636269.018:4545): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=29677 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636269.053:4546): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636269.053:4547): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636269.065:4548): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636269.065:4549): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636269.066:4550): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=29691 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636269.087:4551): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636269.087:4552): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636269.102:4553): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636269.102:4554): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636269.103:4555): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=29706 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636269.156:4556): pid=29721 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636269.156:4557): pid=29721 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D77686A756E7167666D7463636C6C687A676877666778786A63667A6D78716968203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363236382E3936343333372D32393434322D3137303134373135323633393835352F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636269.157:4558): pid=29721 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636269.158:4559): pid=29721 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636269.345:4560): pid=29721 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636269.345:4561): pid=29721 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636269.348:4562): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636269.348:4563): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636269.359:4564): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636269.359:4565): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636269.360:4566): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=29725 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636269.380:4567): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636269.380:4568): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636269.610:4569): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636269.610:4570): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636269.611:4571): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=29740 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636269.629:4572): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636269.629:4573): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636269.644:4574): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636269.644:4575): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636269.645:4576): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=29754 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636269.667:4577): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636269.667:4578): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636269.683:4579): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636269.683:4580): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636269.684:4581): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=29775 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636269.716:4582): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636269.716:4583): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636269.728:4584): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636269.728:4585): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636269.729:4586): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=29789 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636269.751:4587): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636269.751:4588): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636269.762:4589): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636269.762:4590): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636269.763:4591): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=29804 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636269.819:4592): pid=29819 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636269.819:4593): pid=29819 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6372696561616C6B6A7A6A6E75646C746176626779666B6765786167686C7864203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363236392E363331383539352D32393434322D3236373135303233393537383539312F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636269.819:4594): pid=29819 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636269.821:4595): pid=29819 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636270.088:4596): pid=29819 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636270.088:4597): pid=29819 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636270.091:4598): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636270.091:4599): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636270.102:4600): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636270.102:4601): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636270.102:4602): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=29823 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636270.121:4603): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636270.122:4604): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636270.327:4605): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636270.327:4606): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636270.328:4607): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=29838 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636270.348:4608): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636270.348:4609): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636270.359:4610): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636270.359:4611): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636270.360:4612): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=29852 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636270.384:4613): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636270.384:4614): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636270.400:4615): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636270.400:4616): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636270.401:4617): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=29873 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636270.430:4618): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636270.430:4619): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636270.441:4620): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636270.441:4621): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636270.443:4622): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=29887 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636270.462:4623): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636270.462:4624): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636270.473:4625): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636270.473:4626): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636270.475:4627): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=29902 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636270.525:4628): pid=29917 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636270.525:4629): pid=29917 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D656E7572706D6F63766164656D65786F776C76637968697A68626E6D69746A67203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363237302E333531343135362D32393434322D3234343534353332393736373539362F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636270.526:4630): pid=29917 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636270.527:4631): pid=29917 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636270.722:4632): pid=29917 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636270.722:4633): pid=29917 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636270.724:4634): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636270.724:4635): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636270.737:4636): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636270.737:4637): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636270.738:4638): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=29921 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636270.757:4639): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636270.757:4640): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636270.963:4641): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636270.963:4642): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636270.964:4643): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=29936 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636270.985:4644): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636270.985:4645): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636270.997:4646): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636270.997:4647): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636270.998:4648): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=29950 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636271.022:4649): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636271.022:4650): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636271.039:4651): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636271.039:4652): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636271.040:4653): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=29971 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636271.072:4654): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636271.072:4655): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636271.083:4656): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636271.083:4657): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636271.084:4658): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=29985 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636271.107:4659): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636271.107:4660): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636271.121:4661): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636271.121:4662): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636271.122:4663): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=30000 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636271.181:4664): pid=30015 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636271.181:4665): pid=30015 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D726B636D6C78636E6D776F6461626F626F6671626C71726563616D6976667371203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363237302E3938373738342D32393434322D3236323436353932323731323534392F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636271.181:4666): pid=30015 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636271.183:4667): pid=30015 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636271.369:4668): pid=30015 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636271.369:4669): pid=30015 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636271.371:4670): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636271.372:4671): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636271.382:4672): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636271.382:4673): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636271.383:4674): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=30019 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636271.402:4675): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636271.402:4676): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636271.589:4677): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636271.589:4678): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636271.590:4679): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=30034 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636271.607:4680): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636271.607:4681): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636271.617:4682): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636271.617:4683): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636271.618:4684): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=30048 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636271.639:4685): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636271.639:4686): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636271.656:4687): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636271.656:4688): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636271.657:4689): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=30069 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636271.688:4690): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636271.688:4691): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636271.700:4692): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636271.700:4693): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636271.702:4694): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=30083 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636271.722:4695): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636271.722:4696): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636271.733:4697): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636271.733:4698): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636271.734:4699): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=30098 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636271.791:4700): pid=30113 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636271.792:4701): pid=30113 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E77777966646570627463776C656E786B6567756479706E6E7A777475727361203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363237312E363039393230332D32393434322D3139383732363536323531363637342F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636271.792:4702): pid=30113 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636271.794:4703): pid=30113 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636271.958:4704): pid=30113 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636271.959:4705): pid=30113 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636271.961:4706): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636271.961:4707): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636271.971:4708): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636271.971:4709): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636271.972:4710): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=30117 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636271.992:4711): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636271.992:4712): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636272.218:4713): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636272.218:4714): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636272.219:4715): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=30132 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636272.237:4716): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636272.237:4717): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636272.247:4718): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636272.247:4719): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636272.248:4720): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=30146 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636272.271:4721): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636272.271:4722): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636272.287:4723): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636272.287:4724): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636272.288:4725): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=30167 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636272.318:4726): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636272.318:4727): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636272.330:4728): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636272.330:4729): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636272.331:4730): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=30181 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636272.350:4731): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636272.350:4732): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636272.362:4733): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636272.362:4734): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636272.363:4735): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=30196 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636272.417:4736): pid=30211 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636272.417:4737): pid=30211 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D77656D6E766164746A7879616B756D666B716775746565677272796374747A7A203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363237322E323339363137362D32393434322D37373732393233373837363536372F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636272.418:4738): pid=30211 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636272.419:4739): pid=30211 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636272.583:4740): pid=30211 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636272.583:4741): pid=30211 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636272.585:4742): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636272.586:4743): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636272.597:4744): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636272.597:4745): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636272.598:4746): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=30215 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636272.617:4747): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636272.617:4748): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636272.817:4749): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636272.817:4750): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636272.818:4751): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=30230 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636272.836:4752): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636272.836:4753): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636272.847:4754): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636272.847:4755): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636272.848:4756): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=30244 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636272.871:4757): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636272.871:4758): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636272.886:4759): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636272.886:4760): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636272.887:4761): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=30265 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636272.916:4762): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636272.916:4763): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636272.930:4764): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636272.930:4765): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636272.931:4766): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=30279 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636272.951:4767): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636272.951:4768): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636272.962:4769): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636272.962:4770): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636272.963:4771): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=30294 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636273.019:4772): pid=30309 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636273.020:4773): pid=30309 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D78757873767173636563756A6E6B797168786376627672786B796566776D66203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363237322E3833383933322D32393434322D3131333138313830383335323936332F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636273.020:4774): pid=30309 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636273.022:4775): pid=30309 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636273.187:4776): pid=30309 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636273.187:4777): pid=30309 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636273.189:4778): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636273.190:4779): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636273.202:4780): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636273.202:4781): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636273.203:4782): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=30313 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636273.224:4783): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636273.224:4784): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636273.470:4785): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636273.470:4786): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636273.472:4787): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=30328 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636273.491:4788): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636273.491:4789): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636273.502:4790): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636273.502:4791): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636273.503:4792): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=30342 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636273.527:4793): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636273.527:4794): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636273.544:4795): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636273.544:4796): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636273.545:4797): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=30363 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636273.576:4798): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636273.576:4799): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636273.588:4800): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636273.588:4801): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636273.589:4802): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=30377 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636273.611:4803): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636273.611:4804): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636273.623:4805): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636273.623:4806): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636273.624:4807): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=30392 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636273.678:4808): pid=30407 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636273.679:4809): pid=30407 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D62716C666C7A6E6962786B70776D6979617A726C717A797A6C75676A78706B72203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363237332E343934323836352D32393434322D38363632323139313236383738392F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636273.679:4810): pid=30407 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636273.681:4811): pid=30407 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636273.841:4812): pid=30407 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636273.841:4813): pid=30407 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636273.844:4814): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636273.844:4815): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636273.855:4816): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636273.855:4817): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636273.856:4818): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=30411 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636273.877:4819): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636273.878:4820): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636274.109:4821): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636274.109:4822): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636274.110:4823): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=30426 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636274.128:4824): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636274.128:4825): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636274.139:4826): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636274.139:4827): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636274.140:4828): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=30440 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636274.162:4829): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636274.162:4830): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636274.177:4831): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636274.177:4832): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636274.178:4833): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=30461 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636274.206:4834): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636274.207:4835): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636274.217:4836): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636274.217:4837): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636274.218:4838): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=30475 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636274.236:4839): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636274.236:4840): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636274.247:4841): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636274.247:4842): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636274.248:4843): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=30490 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636274.299:4844): pid=30505 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636274.300:4845): pid=30505 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D69756D6A627A616A6A627672776B667066746B6172617762726976796E706C62203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363237342E313331333530352D32393434322D33373731353034333932353034362F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636274.300:4846): pid=30505 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636274.302:4847): pid=30505 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636274.463:4848): pid=30505 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636274.464:4849): pid=30505 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636274.466:4850): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636274.466:4851): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636274.477:4852): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636274.477:4853): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636274.479:4854): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=30509 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636274.500:4855): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636274.500:4856): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636274.698:4857): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636274.698:4858): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636274.699:4859): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=30524 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636274.717:4860): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636274.717:4861): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636274.728:4862): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636274.728:4863): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636274.729:4864): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=30538 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636274.751:4865): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636274.751:4866): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636274.766:4867): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636274.766:4868): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636274.767:4869): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=30559 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636274.797:4870): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636274.797:4871): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636274.809:4872): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636274.809:4873): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636274.810:4874): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=30573 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636274.830:4875): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636274.830:4876): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636274.842:4877): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636274.842:4878): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636274.843:4879): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=30588 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636274.896:4880): pid=30603 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636274.897:4881): pid=30603 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D636579696D78666762647A7679776B67786B616A636B6D7468636B7A686E7175203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363237342E373230303238392D32393434322D3238303635333130373734363330342F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636274.897:4882): pid=30603 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636274.899:4883): pid=30603 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636275.063:4884): pid=30603 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636275.063:4885): pid=30603 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636275.065:4886): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636275.065:4887): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636275.077:4888): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636275.077:4889): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636275.077:4890): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=30607 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636275.097:4891): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636275.097:4892): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636275.296:4893): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636275.296:4894): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636275.297:4895): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=30622 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636275.315:4896): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636275.315:4897): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636275.327:4898): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636275.327:4899): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636275.328:4900): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=30636 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636275.354:4901): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636275.355:4902): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636275.372:4903): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636275.372:4904): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636275.373:4905): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=30657 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636275.403:4906): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636275.403:4907): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636275.414:4908): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636275.414:4909): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636275.415:4910): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=30671 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636275.434:4911): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636275.434:4912): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636275.446:4913): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636275.446:4914): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636275.447:4915): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=30686 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636275.502:4916): pid=30701 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636275.503:4917): pid=30701 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D71686E6D77657A6E75696F79766E687368747776736B79666973706776777065203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363237352E3331383332332D32393434322D3231303938353431353635383737392F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636275.503:4918): pid=30701 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636275.505:4919): pid=30701 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636275.678:4920): pid=30701 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636275.678:4921): pid=30701 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636275.681:4922): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636275.681:4923): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636275.691:4924): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636275.691:4925): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636275.692:4926): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=30705 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636275.713:4927): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636275.713:4928): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636275.912:4929): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636275.912:4930): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636275.913:4931): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=30720 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636275.934:4932): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636275.934:4933): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636275.946:4934): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636275.946:4935): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636275.947:4936): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=30734 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636275.971:4937): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636275.971:4938): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636275.986:4939): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636275.986:4940): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636275.987:4941): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=30755 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636276.016:4942): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636276.016:4943): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636276.028:4944): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636276.028:4945): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636276.029:4946): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=30769 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636276.048:4947): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636276.048:4948): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636276.060:4949): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636276.060:4950): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636276.061:4951): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=30784 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636276.114:4952): pid=30799 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636276.114:4953): pid=30799 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F6C6F65616B6E6D63737A636F6C776B6C6972756E706C626768696D70767061203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363237352E3933363934332D32393434322D3133363631343334323935353939362F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636276.114:4954): pid=30799 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636276.116:4955): pid=30799 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636276.277:4956): pid=30799 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636276.277:4957): pid=30799 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636276.280:4958): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636276.280:4959): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636276.291:4960): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636276.291:4961): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636276.292:4962): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=30803 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636276.311:4963): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636276.311:4964): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636276.536:4965): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636276.536:4966): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636276.537:4967): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=30818 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636276.553:4968): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636276.553:4969): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636276.563:4970): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636276.564:4971): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636276.564:4972): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=30832 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636276.585:4973): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636276.585:4974): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636276.600:4975): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636276.600:4976): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636276.601:4977): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=30853 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636276.629:4978): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636276.629:4979): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636276.640:4980): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636276.640:4981): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636276.641:4982): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=30867 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636276.659:4983): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636276.659:4984): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636276.670:4985): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636276.670:4986): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636276.671:4987): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=30882 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636276.723:4988): pid=30897 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636276.723:4989): pid=30897 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6964756B627766616A627277657965756D75726B63786D62746E616F6A6B6C67203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363237362E353535353338342D32393434322D32323736393335303430373836362F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636276.723:4990): pid=30897 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636276.725:4991): pid=30897 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636276.881:4992): pid=30897 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636276.881:4993): pid=30897 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636276.884:4994): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636276.884:4995): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636276.894:4996): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636276.894:4997): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636276.895:4998): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=30901 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636276.915:4999): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636276.915:5000): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636277.133:5001): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636277.133:5002): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636277.134:5003): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=30916 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636277.154:5004): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636277.154:5005): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636277.165:5006): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636277.165:5007): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636277.166:5008): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=30930 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636277.187:5009): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636277.187:5010): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636277.202:5011): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636277.202:5012): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636277.203:5013): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=30951 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636277.233:5014): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636277.233:5015): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636277.244:5016): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636277.244:5017): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636277.245:5018): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=30965 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636277.264:5019): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636277.264:5020): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636277.277:5021): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636277.278:5022): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636277.279:5023): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=30980 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636277.339:5024): pid=30995 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636277.339:5025): pid=30995 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F62716E747672786E767666616A7577736D6F7770777370747762726D747961203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363237372E313536333834372D32393434322D36393336303539303338313537382F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636277.340:5026): pid=30995 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636277.341:5027): pid=30995 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636277.502:5028): pid=30995 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636277.502:5029): pid=30995 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636277.505:5030): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636277.505:5031): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636277.516:5032): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636277.516:5033): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636277.517:5034): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=30999 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636277.536:5035): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636277.536:5036): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636277.726:5037): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636277.726:5038): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636277.727:5039): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=31014 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636277.746:5040): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636277.746:5041): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636277.760:5042): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636277.760:5043): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636277.761:5044): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=31028 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636277.787:5045): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636277.787:5046): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636277.804:5047): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636277.804:5048): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636277.805:5049): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=31049 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636277.837:5050): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636277.837:5051): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636277.848:5052): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636277.848:5053): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636277.850:5054): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=31063 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636277.869:5055): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636277.869:5056): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636277.880:5057): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636277.880:5058): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636277.881:5059): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=31078 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636277.936:5060): pid=31093 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636277.936:5061): pid=31093 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D756F7579787A6A6C7A6B676F706D736871666561657074656E686369706B7066203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363237372E3734383534352D32393434322D3232333334393736353139333731392F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636277.937:5062): pid=31093 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636277.939:5063): pid=31093 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636278.157:5064): pid=31093 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636278.157:5065): pid=31093 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636278.160:5066): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636278.160:5067): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636278.172:5068): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636278.172:5069): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636278.173:5070): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=31097 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636278.194:5071): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636278.194:5072): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636278.385:5073): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636278.385:5074): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636278.386:5075): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=31112 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636278.404:5076): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636278.404:5077): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636278.414:5078): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636278.414:5079): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636278.415:5080): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=31126 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636278.437:5081): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636278.437:5082): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636278.452:5083): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636278.452:5084): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636278.453:5085): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=31147 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636278.482:5086): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636278.482:5087): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636278.493:5088): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636278.493:5089): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636278.495:5090): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=31161 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636278.515:5091): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636278.515:5092): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636278.526:5093): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636278.526:5094): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636278.527:5095): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=31176 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636278.580:5096): pid=31191 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636278.580:5097): pid=31191 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E656A7772786172716D706D7163616A6C746977776E67786C797A716268716D203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363237382E3430353837352D32393434322D34373133323232373937363536342F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636278.581:5098): pid=31191 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636278.583:5099): pid=31191 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636278.738:5100): pid=31191 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636278.738:5101): pid=31191 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636278.741:5102): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636278.741:5103): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636278.751:5104): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636278.751:5105): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636278.752:5106): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=31195 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636278.772:5107): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636278.772:5108): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636278.988:5109): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636278.988:5110): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636278.989:5111): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=31210 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636279.007:5112): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636279.007:5113): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636279.017:5114): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636279.017:5115): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636279.018:5116): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=31224 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636279.040:5117): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636279.041:5118): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636279.055:5119): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636279.055:5120): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636279.056:5121): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=31245 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636279.085:5122): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636279.085:5123): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636279.100:5124): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636279.100:5125): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636279.101:5126): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=31259 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636279.120:5127): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636279.120:5128): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636279.132:5129): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636279.132:5130): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636279.133:5131): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=31274 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636279.185:5132): pid=31289 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636279.185:5133): pid=31289 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D737A6D6D6F626C746D68736F6A7A6F796B64756F74666568786679686B746164203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363237392E303038393237332D32393434322D3132353238383531313639383335362F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636279.186:5134): pid=31289 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636279.187:5135): pid=31289 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636279.345:5136): pid=31289 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636279.346:5137): pid=31289 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636279.348:5138): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636279.348:5139): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636279.362:5140): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636279.362:5141): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636279.363:5142): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=31293 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636279.385:5143): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636279.385:5144): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636279.656:5145): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636279.656:5146): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636279.657:5147): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=31308 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636279.676:5148): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636279.676:5149): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636279.687:5150): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636279.687:5151): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636279.688:5152): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=31322 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636279.709:5153): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636279.709:5154): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636279.725:5155): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636279.725:5156): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636279.726:5157): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=31343 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636279.757:5158): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636279.757:5159): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636279.772:5160): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636279.772:5161): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636279.773:5162): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=31357 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636279.795:5163): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636279.795:5164): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636279.807:5165): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636279.807:5166): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636279.808:5167): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=31372 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636279.865:5168): pid=31387 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636279.866:5169): pid=31387 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6662707575706B7474707377677A7268686467646C70696B697964766D687376203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363237392E363738343331372D32393434322D3234363138323632343533303933382F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636279.866:5170): pid=31387 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636279.868:5171): pid=31387 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636280.034:5172): pid=31387 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636280.035:5173): pid=31387 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636280.039:5174): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636280.039:5175): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636280.051:5176): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636280.051:5177): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636280.053:5178): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=31391 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636280.074:5179): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636280.074:5180): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636280.304:5181): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636280.304:5182): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636280.305:5183): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=31406 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636280.323:5184): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636280.324:5185): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636280.335:5186): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636280.335:5187): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636280.336:5188): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=31420 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636280.359:5189): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636280.359:5190): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636280.375:5191): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636280.375:5192): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636280.376:5193): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=31441 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636280.407:5194): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636280.407:5195): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636280.419:5196): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636280.419:5197): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636280.420:5198): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=31455 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636280.440:5199): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636280.440:5200): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636280.451:5201): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636280.452:5202): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636280.453:5203): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=31470 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636280.509:5204): pid=31485 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636280.509:5205): pid=31485 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F6663756E697A6476636574646B76676F706A6A63716B7764747A7272637762203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363238302E333235363230322D32393434322D353739353531333633373330322F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636280.509:5206): pid=31485 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636280.511:5207): pid=31485 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636280.687:5208): pid=31485 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636280.688:5209): pid=31485 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636280.690:5210): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636280.690:5211): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636280.703:5212): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636280.703:5213): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636280.704:5214): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=31489 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636280.723:5215): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636280.723:5216): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636280.935:5217): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636280.935:5218): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636280.936:5219): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=31504 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636280.954:5220): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636280.954:5221): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636280.964:5222): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636280.964:5223): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636280.965:5224): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=31518 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636280.987:5225): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636280.987:5226): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636281.003:5227): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636281.003:5228): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636281.004:5229): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=31539 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636281.032:5230): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636281.032:5231): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636281.043:5232): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636281.043:5233): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636281.044:5234): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=31553 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636281.064:5235): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636281.064:5236): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636281.075:5237): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636281.075:5238): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636281.076:5239): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=31568 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636281.128:5240): pid=31583 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636281.128:5241): pid=31583 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6675666A6B67627675717976626D62746D727573657A677571766B686B786564203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363238302E3935353839342D32393434322D3237373939323933313939363337362F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636281.128:5242): pid=31583 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636281.130:5243): pid=31583 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636281.294:5244): pid=31583 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636281.294:5245): pid=31583 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636281.297:5246): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636281.297:5247): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636281.308:5248): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636281.308:5249): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636281.309:5250): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=31587 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636281.327:5251): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636281.327:5252): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636281.516:5253): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636281.516:5254): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636281.517:5255): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=31602 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636281.534:5256): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636281.534:5257): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636281.544:5258): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636281.544:5259): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636281.545:5260): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=31616 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636281.567:5261): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636281.567:5262): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636281.581:5263): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636281.581:5264): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636281.582:5265): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=31637 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636281.611:5266): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636281.611:5267): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636281.624:5268): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636281.624:5269): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636281.625:5270): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=31651 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636281.644:5271): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636281.644:5272): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636281.655:5273): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636281.655:5274): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636281.656:5275): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=31666 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636281.708:5276): pid=31681 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636281.708:5277): pid=31681 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6161736A6C6476786B696B716778667466616E777A71667079726B626F786469203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363238312E353335393936342D32393434322D36323932363536353130373830302F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636281.709:5278): pid=31681 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636281.710:5279): pid=31681 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636281.924:5280): pid=31681 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636281.925:5281): pid=31681 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636281.927:5282): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636281.927:5283): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636281.938:5284): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636281.938:5285): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636281.939:5286): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=31685 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636281.957:5287): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636281.957:5288): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636282.148:5289): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636282.148:5290): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636282.149:5291): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=31700 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636282.166:5292): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636282.166:5293): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636282.176:5294): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636282.176:5295): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636282.177:5296): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=31714 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636282.198:5297): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636282.198:5298): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636282.212:5299): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636282.212:5300): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636282.213:5301): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=31735 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636282.240:5302): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636282.240:5303): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636282.251:5304): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636282.251:5305): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636282.252:5306): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=31749 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636282.269:5307): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636282.269:5308): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636282.281:5309): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636282.281:5310): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636282.282:5311): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=31764 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636282.334:5312): pid=31779 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636282.334:5313): pid=31779 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F6C666975686B6A776B6E7564717063776B7A647A776F63657A74766D6E6161203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363238322E313637373538372D32393434322D3130363235343030313432343237342F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636282.335:5314): pid=31779 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636282.337:5315): pid=31779 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636282.527:5316): pid=31779 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636282.527:5317): pid=31779 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636282.530:5318): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636282.530:5319): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636282.542:5320): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636282.542:5321): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636282.543:5322): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=31783 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636282.563:5323): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636282.563:5324): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636282.751:5325): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636282.751:5326): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636282.752:5327): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=31798 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636282.769:5328): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636282.769:5329): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636282.779:5330): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636282.779:5331): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636282.780:5332): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=31812 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636282.801:5333): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636282.801:5334): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636282.816:5335): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636282.816:5336): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636282.817:5337): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=31833 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636282.845:5338): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636282.845:5339): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636282.856:5340): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636282.856:5341): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636282.857:5342): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=31847 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636282.877:5343): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636282.877:5344): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636282.888:5345): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636282.888:5346): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636282.889:5347): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=31862 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636282.940:5348): pid=31877 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636282.940:5349): pid=31877 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6668666C6B6E6F6A6873636E7176676C68746E76766E6A69626176626B657873203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363238322E373731323936352D32393434322D38313232343635353031393538372F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636282.941:5350): pid=31877 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636282.942:5351): pid=31877 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636283.123:5352): pid=31877 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636283.123:5353): pid=31877 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636283.125:5354): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636283.126:5355): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636283.136:5356): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636283.136:5357): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636283.137:5358): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=31881 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636283.156:5359): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636283.156:5360): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636283.345:5361): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636283.345:5362): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636283.346:5363): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=31896 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636283.364:5364): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636283.364:5365): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636283.375:5366): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636283.375:5367): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636283.376:5368): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=31910 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636283.400:5369): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636283.400:5370): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636283.416:5371): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636283.416:5372): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636283.417:5373): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=31931 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636283.448:5374): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636283.448:5375): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636283.460:5376): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636283.460:5377): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636283.461:5378): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=31945 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636283.482:5379): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636283.482:5380): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636283.492:5381): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636283.493:5382): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636283.494:5383): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=31960 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636283.545:5384): pid=31975 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636283.546:5385): pid=31975 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D716C746C676A61647A636B646F65726F73736D736A676C647A736C636C757861203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363238332E333635393435382D32393434322D3133343232383132323234303538312F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636283.546:5386): pid=31975 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636283.548:5387): pid=31975 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636283.705:5388): pid=31975 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636283.705:5389): pid=31975 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636283.707:5390): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636283.707:5391): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636283.718:5392): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636283.718:5393): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636283.719:5394): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=31979 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636283.738:5395): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636283.738:5396): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636283.931:5397): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636283.931:5398): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636283.933:5399): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=31994 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636283.953:5400): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636283.953:5401): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636283.964:5402): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636283.964:5403): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636283.966:5404): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=32008 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636283.992:5405): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636283.992:5406): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636284.011:5407): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636284.011:5408): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636284.013:5409): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=32029 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636284.051:5410): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636284.051:5411): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636284.066:5412): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636284.066:5413): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636284.067:5414): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=32043 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636284.087:5415): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636284.087:5416): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636284.100:5417): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636284.100:5418): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636284.101:5419): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=32058 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636284.152:5420): pid=32073 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636284.152:5421): pid=32073 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D6A7A706C69756968616A6C636D7078746B7968776664796373616579747072203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363238332E393534373638372D32393434322D34323534373931373537343038322F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636284.153:5422): pid=32073 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636284.154:5423): pid=32073 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636284.316:5424): pid=32073 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636284.316:5425): pid=32073 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636284.319:5426): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636284.319:5427): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636284.330:5428): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636284.330:5429): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636284.331:5430): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=32077 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636284.351:5431): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636284.351:5432): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636284.580:5433): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636284.580:5434): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636284.581:5435): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=32092 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636284.599:5436): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636284.599:5437): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636284.610:5438): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636284.610:5439): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636284.611:5440): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=32106 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636284.635:5441): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636284.635:5442): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636284.652:5443): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636284.652:5444): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636284.653:5445): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=32127 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636284.687:5446): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636284.687:5447): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636284.701:5448): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636284.701:5449): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636284.702:5450): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=32141 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636284.721:5451): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636284.721:5452): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636284.733:5453): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636284.733:5454): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636284.734:5455): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=32156 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636284.788:5456): pid=32171 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636284.788:5457): pid=32171 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D796B6465626B73687366766870686D716B63647779747A6C666768776167786B203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363238342E3630313032332D32393434322D3230383730333736363734353239372F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636284.789:5458): pid=32171 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636284.790:5459): pid=32171 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636284.954:5460): pid=32171 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636284.954:5461): pid=32171 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636284.957:5462): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636284.957:5463): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636284.970:5464): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636284.970:5465): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636284.971:5466): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=32175 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636284.991:5467): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636284.991:5468): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636285.185:5469): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636285.185:5470): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636285.186:5471): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=32190 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636285.204:5472): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636285.204:5473): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636285.217:5474): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636285.217:5475): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636285.218:5476): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=32204 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636285.241:5477): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636285.241:5478): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636285.256:5479): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636285.256:5480): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636285.257:5481): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=32225 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636285.286:5482): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636285.286:5483): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636285.297:5484): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636285.297:5485): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636285.298:5486): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=32239 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636285.318:5487): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636285.318:5488): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636285.329:5489): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636285.329:5490): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636285.330:5491): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=32254 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636285.384:5492): pid=32269 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636285.384:5493): pid=32269 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7965756B7675757A77756E65687A6267656D757164727377796A67687479796F203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363238352E323035383638322D32393434322D34343032373532353130323039302F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636285.385:5494): pid=32269 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636285.386:5495): pid=32269 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636285.551:5496): pid=32269 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636285.552:5497): pid=32269 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636285.554:5498): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636285.554:5499): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636285.565:5500): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636285.565:5501): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636285.566:5502): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=32273 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636285.586:5503): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636285.586:5504): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636285.786:5505): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636285.786:5506): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636285.787:5507): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=32288 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636285.804:5508): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636285.804:5509): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636285.815:5510): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636285.815:5511): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636285.816:5512): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=32302 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636285.838:5513): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636285.838:5514): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636285.854:5515): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636285.854:5516): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636285.855:5517): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=32323 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636285.885:5518): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636285.885:5519): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636285.896:5520): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636285.896:5521): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636285.897:5522): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=32337 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636285.916:5523): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636285.916:5524): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636285.928:5525): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636285.928:5526): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636285.929:5527): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=32352 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636285.989:5528): pid=32367 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636285.989:5529): pid=32367 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D61767772767A6C64676D65756E73766D69776267756474747471616A716F776C203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363238352E383036333434352D32393434322D3136313135383036343137333832372F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636285.990:5530): pid=32367 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636285.991:5531): pid=32367 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636286.154:5532): pid=32367 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636286.154:5533): pid=32367 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636286.157:5534): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636286.157:5535): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636286.168:5536): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636286.168:5537): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636286.169:5538): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=32371 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636286.189:5539): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636286.189:5540): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636286.627:5541): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636286.627:5542): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636286.628:5543): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=32391 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636286.646:5544): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636286.646:5545): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636286.656:5546): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636286.656:5547): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636286.657:5548): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=32405 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636286.679:5549): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636286.679:5550): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636286.841:5551): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636286.841:5552): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636286.842:5553): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=32426 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636286.870:5554): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636286.870:5555): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636286.883:5556): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636286.883:5557): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636286.884:5558): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=32440 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636286.902:5559): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636286.902:5560): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636286.912:5561): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636286.912:5562): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636286.913:5563): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=32455 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636286.965:5564): pid=32470 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636286.966:5565): pid=32470 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D62666F65666E676778706862716E787A737077686E7265776A6762716B776866203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363238362E363437393238372D33323338392D3232383638333532303039393633372F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636286.966:5566): pid=32470 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636286.967:5567): pid=32470 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636287.149:5568): pid=32470 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636287.149:5569): pid=32470 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636287.152:5570): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636287.152:5571): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636287.169:5572): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636287.169:5573): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636287.170:5574): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=32475 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636287.191:5575): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636287.191:5576): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636287.202:5577): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636287.203:5578): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636287.203:5579): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=32489 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636287.223:5580): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636287.223:5581): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636287.239:5582): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636287.239:5583): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636287.240:5584): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=32505 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636287.271:5585): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636287.271:5586): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636287.282:5587): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636287.282:5588): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636287.283:5589): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=32519 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636287.302:5590): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636287.302:5591): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636287.314:5592): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636287.314:5593): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636287.315:5594): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=32534 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636287.367:5595): pid=32549 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636287.367:5596): pid=32549 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C727A687A6F7A6E6C7A70646265746276706C6A74627964797A71626B7A6E6C203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363238362E363437393238372D33323338392D3232383638333532303039393633372F416E736962616C6C5A5F636F70792E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636287.368:5597): pid=32549 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636287.370:5598): pid=32549 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636287.530:5599): pid=32549 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636287.530:5600): pid=32549 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636287.533:5601): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636287.533:5602): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636287.547:5603): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636287.547:5604): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636287.548:5605): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=32553 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636287.568:5606): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636287.568:5607): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636287.819:5608): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636287.819:5609): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636287.820:5610): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=32570 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636287.838:5611): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636287.838:5612): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636287.848:5613): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636287.848:5614): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636287.849:5615): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=32584 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636287.872:5616): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636287.872:5617): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636287.892:5618): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636287.892:5619): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636287.893:5620): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=32605 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636287.927:5621): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636287.927:5622): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636287.941:5623): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636287.941:5624): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636287.942:5625): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=32619 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636287.963:5626): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636287.963:5627): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636287.973:5628): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636287.974:5629): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636287.975:5630): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=32634 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636288.030:5631): pid=32649 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636288.030:5632): pid=32649 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd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exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636288.031:5633): pid=32649 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636288.032:5634): pid=32649 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=BPF msg=audit(1744636289.087:5635): prog-id=274 op=LOAD type=SYSCALL msg=audit(1744636289.087:5635): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001c9c48 a2=90 a3=0 items=0 ppid=32688 pid=32699 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636289.087:5635): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34383261343230343566383532323063646361316433383231 type=BPF msg=audit(1744636289.087:5636): prog-id=275 op=LOAD type=SYSCALL msg=audit(1744636289.087:5636): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c0001c99d8 a2=90 a3=0 items=0 ppid=32688 pid=32699 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636289.087:5636): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34383261343230343566383532323063646361316433383231 type=BPF msg=audit(1744636289.087:5637): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636289.087:5638): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636289.087:5639): prog-id=276 op=LOAD type=SYSCALL msg=audit(1744636289.087:5639): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001c9eb0 a2=90 a3=0 items=0 ppid=32688 pid=32699 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636289.087:5639): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34383261343230343566383532323063646361316433383231 type=BPF msg=audit(1744636289.120:5640): prog-id=277 op=LOAD type=BPF msg=audit(1744636289.121:5641): prog-id=278 op=LOAD type=SYSCALL msg=audit(1744636289.121:5641): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000219ad0 a2=90 a3=0 items=0 ppid=32736 pid=32754 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636289.121:5641): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34663232333062343032376166616635336236616563346233 type=BPF msg=audit(1744636289.121:5642): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636289.121:5643): prog-id=279 op=LOAD type=SYSCALL msg=audit(1744636289.121:5643): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000219c48 a2=90 a3=0 items=0 ppid=32736 pid=32754 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636289.121:5643): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34663232333062343032376166616635336236616563346233 type=BPF msg=audit(1744636289.121:5644): prog-id=280 op=LOAD type=SYSCALL msg=audit(1744636289.121:5644): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0002199d8 a2=90 a3=0 items=0 ppid=32736 pid=32754 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636289.121:5644): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34663232333062343032376166616635336236616563346233 type=BPF msg=audit(1744636289.122:5645): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636289.122:5646): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636289.122:5647): prog-id=281 op=LOAD type=SYSCALL msg=audit(1744636289.122:5647): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000219eb0 a2=90 a3=0 items=0 ppid=32736 pid=32754 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636289.122:5647): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34663232333062343032376166616635336236616563346233 type=BPF msg=audit(1744636289.125:5648): prog-id=282 op=LOAD type=BPF msg=audit(1744636289.126:5649): prog-id=283 op=LOAD type=SYSCALL msg=audit(1744636289.126:5649): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c00019dad0 a2=90 a3=0 items=0 ppid=32744 pid=32759 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636289.126:5649): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39333231663566653264333337343064313334363138623933 type=BPF msg=audit(1744636289.126:5650): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636289.126:5651): prog-id=284 op=LOAD type=SYSCALL msg=audit(1744636289.126:5651): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c00019dc48 a2=90 a3=0 items=0 ppid=32744 pid=32759 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636289.126:5651): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39333231663566653264333337343064313334363138623933 type=BPF msg=audit(1744636289.127:5652): prog-id=285 op=LOAD type=SYSCALL msg=audit(1744636289.127:5652): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00019d9d8 a2=90 a3=0 items=0 ppid=32744 pid=32759 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636289.127:5652): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39333231663566653264333337343064313334363138623933 type=BPF msg=audit(1744636289.127:5653): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636289.127:5654): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636289.127:5655): prog-id=286 op=LOAD type=SYSCALL msg=audit(1744636289.127:5655): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c00019deb0 a2=90 a3=0 items=0 ppid=32744 pid=32759 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636289.127:5655): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39333231663566653264333337343064313334363138623933 type=BPF msg=audit(1744636289.297:5656): prog-id=287 op=LOAD type=BPF msg=audit(1744636289.298:5657): prog-id=288 op=LOAD type=SYSCALL msg=audit(1744636289.298:5657): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00011dad0 a2=90 a3=0 items=0 ppid=33035 pid=33059 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636289.298:5657): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39353534366435343165363437383632333137363532316539 type=BPF msg=audit(1744636289.298:5658): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636289.298:5659): prog-id=289 op=LOAD type=SYSCALL msg=audit(1744636289.298:5659): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00011dc48 a2=90 a3=0 items=0 ppid=33035 pid=33059 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636289.298:5659): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39353534366435343165363437383632333137363532316539 type=BPF msg=audit(1744636289.299:5660): prog-id=290 op=LOAD type=SYSCALL msg=audit(1744636289.299:5660): arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=c00011d9d8 a2=90 a3=0 items=0 ppid=33035 pid=33059 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636289.299:5660): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39353534366435343165363437383632333137363532316539 type=BPF msg=audit(1744636289.299:5661): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636289.299:5662): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636289.300:5663): prog-id=291 op=LOAD type=SYSCALL msg=audit(1744636289.300:5663): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00011deb0 a2=90 a3=0 items=0 ppid=33035 pid=33059 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636289.300:5663): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39353534366435343165363437383632333137363532316539 type=BPF msg=audit(1744636289.348:5664): prog-id=292 op=LOAD type=BPF msg=audit(1744636289.349:5665): prog-id=293 op=LOAD type=SYSCALL msg=audit(1744636289.349:5665): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001b7ad0 a2=90 a3=0 items=0 ppid=33103 pid=33155 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636289.349:5665): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65396138303737326137303063313232363932336266383566 type=BPF msg=audit(1744636289.350:5666): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636289.350:5667): prog-id=294 op=LOAD type=SYSCALL msg=audit(1744636289.350:5667): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001b7c48 a2=90 a3=0 items=0 ppid=33103 pid=33155 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636289.350:5667): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65396138303737326137303063313232363932336266383566 type=BPF msg=audit(1744636289.351:5668): prog-id=295 op=LOAD type=SYSCALL msg=audit(1744636289.351:5668): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001b79d8 a2=90 a3=0 items=0 ppid=33103 pid=33155 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636289.351:5668): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65396138303737326137303063313232363932336266383566 type=BPF msg=audit(1744636289.351:5669): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636289.351:5670): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636289.351:5671): prog-id=296 op=LOAD type=SYSCALL msg=audit(1744636289.351:5671): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001b7eb0 a2=90 a3=0 items=0 ppid=33103 pid=33155 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636289.351:5671): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65396138303737326137303063313232363932336266383566 type=BPF msg=audit(1744636289.377:5672): prog-id=297 op=LOAD type=BPF msg=audit(1744636289.378:5673): prog-id=298 op=LOAD type=SYSCALL msg=audit(1744636289.378:5673): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001b9ad0 a2=90 a3=0 items=0 ppid=33164 pid=33192 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636289.378:5673): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31613932323435326438363236333334303036363237373736 type=BPF msg=audit(1744636289.378:5674): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636289.379:5675): prog-id=299 op=LOAD type=SYSCALL msg=audit(1744636289.379:5675): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001b9c48 a2=90 a3=0 items=0 ppid=33164 pid=33192 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636289.379:5675): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31613932323435326438363236333334303036363237373736 type=BPF msg=audit(1744636289.379:5676): prog-id=300 op=LOAD type=SYSCALL msg=audit(1744636289.379:5676): arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=c0001b99d8 a2=90 a3=0 items=0 ppid=33164 pid=33192 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636289.379:5676): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31613932323435326438363236333334303036363237373736 type=BPF msg=audit(1744636289.379:5677): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636289.379:5678): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636289.379:5679): prog-id=301 op=LOAD type=SYSCALL msg=audit(1744636289.379:5679): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001b9eb0 a2=90 a3=0 items=0 ppid=33164 pid=33192 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636289.379:5679): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31613932323435326438363236333334303036363237373736 type=USER_END msg=audit(1744636289.544:5680): pid=32649 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636289.544:5681): pid=32649 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636289.547:5682): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636289.547:5683): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636289.560:5684): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636289.560:5685): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636289.561:5686): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=33685 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636289.586:5687): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636289.586:5688): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=BPF msg=audit(1744636289.742:5689): prog-id=0 op=UNLOAD type=USER_LOGIN msg=audit(1744636290.175:5690): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636290.175:5691): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636290.176:5692): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=34145 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636290.196:5693): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636290.196:5694): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636290.208:5695): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636290.208:5696): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636290.211:5697): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=34188 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636290.240:5698): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636290.240:5699): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636290.255:5700): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636290.255:5701): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636290.258:5702): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=34246 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636290.292:5703): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636290.292:5704): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636290.306:5705): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636290.306:5706): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636290.308:5707): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=34283 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636290.331:5708): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636290.331:5709): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636290.342:5710): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636290.342:5711): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636290.344:5712): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=34327 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636290.411:5713): pid=34358 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636290.411:5714): pid=34358 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D796A61686F636C646B62737A6C657A77696A6F6C756A6A68766D6462767A7167203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363239302E313938323936332D33333932312D37343038373038353431363231322F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636290.412:5715): pid=34358 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636290.419:5716): pid=34358 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636290.753:5717): pid=34358 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636290.753:5718): pid=34358 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636290.756:5719): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636290.756:5720): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636290.770:5721): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636290.770:5722): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636290.774:5723): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=34415 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636290.812:5724): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636290.812:5725): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636291.083:5726): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636291.083:5727): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636291.084:5728): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=34452 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636291.102:5729): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636291.102:5730): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636291.111:5731): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636291.111:5732): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636291.115:5733): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=34469 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636291.139:5734): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636291.139:5735): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636291.158:5736): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636291.158:5737): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636291.160:5738): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=34507 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636291.201:5739): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636291.201:5740): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636291.216:5741): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636291.216:5742): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636291.219:5743): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=34521 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636291.262:5744): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636291.262:5745): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636291.272:5746): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636291.275:5747): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636291.276:5748): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=34536 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636291.329:5749): pid=34551 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636291.329:5750): pid=34551 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7763666969636671646D78796B64787A716A7A68636C69616B76647374756375203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363239312E313033363831382D33333932312D34333432333132353935313730332F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636291.330:5751): pid=34551 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636291.331:5752): pid=34551 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636291.671:5753): pid=34551 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636291.671:5754): pid=34551 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636291.675:5755): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636291.675:5756): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636291.690:5757): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636291.690:5758): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636291.691:5759): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=34594 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636291.741:5760): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636291.741:5761): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636292.010:5762): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636292.010:5763): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636292.013:5764): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=34703 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636292.047:5765): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636292.047:5766): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636292.058:5767): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636292.058:5768): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636292.059:5769): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=34739 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636292.087:5770): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636292.087:5771): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636292.103:5772): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636292.103:5773): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636292.105:5774): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=34760 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636292.146:5775): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636292.146:5776): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636292.160:5777): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636292.160:5778): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636292.161:5779): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=34775 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636292.188:5780): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636292.188:5781): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636292.199:5782): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636292.199:5783): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636292.200:5784): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=34808 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636292.256:5785): pid=34823 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636292.256:5786): pid=34823 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D756B63796B7065626A696A6A7A70636465766D696F6A657364617A6476677771203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363239322E303438343030362D33333932312D3139353132353335353938393839332F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636292.257:5787): pid=34823 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636292.258:5788): pid=34823 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636296.499:5789): pid=34823 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636296.499:5790): pid=34823 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636296.502:5791): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636296.502:5792): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636296.512:5793): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636296.512:5794): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636296.514:5795): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=35145 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636296.539:5796): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636296.539:5797): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636296.798:5798): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636296.798:5799): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636296.801:5800): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=35161 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636296.828:5801): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636296.828:5802): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636296.838:5803): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636296.842:5804): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636296.846:5805): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=35175 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636296.872:5806): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636296.872:5807): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636296.893:5808): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636296.893:5809): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636296.897:5810): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=35196 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636296.938:5811): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636296.938:5812): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636296.953:5813): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636296.953:5814): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636296.957:5815): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=35216 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636296.981:5816): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636296.982:5817): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636296.996:5818): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636296.996:5819): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636296.998:5820): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=35231 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636297.073:5821): pid=35246 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636297.073:5822): pid=35246 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D676A796C6769656E62696174646E716E746B73727366637769746A69666D616A203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363239362E383330343539362D33333932312D32343737333432303238373338332F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636297.074:5823): pid=35246 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636297.078:5824): pid=35246 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636297.979:5825): pid=35246 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636297.979:5826): pid=35246 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636297.984:5827): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636297.984:5828): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636297.996:5829): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636297.996:5830): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636297.997:5831): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=35368 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636298.022:5832): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636298.022:5833): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636298.359:5834): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636298.359:5835): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636298.361:5836): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=35390 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636298.384:5837): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636298.384:5838): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636298.390:5839): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636298.390:5840): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636298.391:5841): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=35409 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636298.437:5842): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636298.437:5843): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636298.452:5844): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636298.452:5845): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636298.453:5846): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=35437 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636298.483:5847): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636298.483:5848): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636298.495:5849): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636298.495:5850): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636298.496:5851): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=35451 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636298.524:5852): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636298.524:5853): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636298.536:5854): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636298.536:5855): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636298.538:5856): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=35466 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636298.602:5857): pid=35481 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636298.602:5858): pid=35481 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6664627A7A6F6D6C776D6C6A6F6176636367687867706676726E76656D6E6672203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363239382E3338313535372D33333932312D3237363736303436333838353337322F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636298.603:5859): pid=35481 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636298.605:5860): pid=35481 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636299.152:5861): pid=35481 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636299.152:5862): pid=35481 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636299.155:5863): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636299.155:5864): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636299.169:5865): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636299.170:5866): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636299.171:5867): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=35596 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636299.200:5868): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636299.200:5869): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636299.456:5870): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636299.456:5871): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636299.458:5872): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=35611 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636299.499:5873): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636299.499:5874): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636299.514:5875): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636299.514:5876): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636299.517:5877): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=35625 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636299.575:5878): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636299.575:5879): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636299.594:5880): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636299.594:5881): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636299.595:5882): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=35647 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636299.662:5883): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636299.662:5884): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636299.674:5885): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636299.674:5886): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636299.675:5887): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=35661 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636299.698:5888): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636299.698:5889): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636299.710:5890): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636299.710:5891): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636299.711:5892): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=35676 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636299.780:5893): pid=35691 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636299.780:5894): pid=35691 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D727263626C626C72627470627A78787267636678726A6F64756F7A776D716478203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363239392E353031333136332D33333932312D31383631333836343433343331312F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636299.780:5895): pid=35691 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636299.786:5896): pid=35691 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636312.269:5897): pid=35691 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636312.270:5898): pid=35691 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636312.273:5899): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636312.273:5900): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636312.284:5901): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636312.284:5902): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636312.285:5903): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=36089 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636312.303:5904): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636312.304:5905): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636312.552:5906): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636312.552:5907): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636312.552:5908): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=36107 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636312.576:5909): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636312.576:5910): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636312.586:5911): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636312.586:5912): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636312.587:5913): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=36121 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636312.613:5914): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636312.613:5915): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636312.629:5916): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636312.629:5917): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636312.630:5918): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=36142 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636312.666:5919): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636312.667:5920): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636312.678:5921): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636312.678:5922): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636312.681:5923): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=36156 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636312.705:5924): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636312.705:5925): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636312.717:5926): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636312.717:5927): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636312.718:5928): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=36171 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636312.772:5929): pid=36186 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636312.772:5930): pid=36186 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D6D717861776A6170677068756F6A64727274657875617A6C636B72696D7165203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363331322E353739323831362D33333932312D3133323532363030373435393931312F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636312.772:5931): pid=36186 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636312.777:5932): pid=36186 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636313.750:5933): pid=36186 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636313.751:5934): pid=36186 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636313.754:5935): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636313.755:5936): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636313.767:5937): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636313.767:5938): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636313.769:5939): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=36223 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636313.792:5940): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636313.793:5941): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636314.110:5942): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636314.110:5943): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636314.113:5944): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=36243 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636314.135:5945): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636314.135:5946): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636314.146:5947): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636314.146:5948): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636314.148:5949): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=36257 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636314.177:5950): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636314.177:5951): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636314.196:5952): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636314.196:5953): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636314.197:5954): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=36278 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636314.232:5955): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636314.232:5956): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636314.246:5957): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636314.246:5958): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636314.247:5959): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=36292 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636314.273:5960): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636314.274:5961): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636314.289:5962): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636314.289:5963): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636314.290:5964): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=36310 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636314.352:5965): pid=36326 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636314.352:5966): pid=36326 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D736D6F657061727A61746C70716F6E6D796A706261686B756F616E6C6863676A203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363331342E313337393638382D33333932312D3234363234313032343036303939312F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636314.352:5967): pid=36326 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636314.355:5968): pid=36326 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636314.668:5969): pid=36326 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636314.668:5970): pid=36326 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636314.672:5971): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636314.673:5972): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636314.687:5973): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636314.687:5974): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636314.689:5975): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=36344 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636314.711:5976): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636314.712:5977): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636314.958:5978): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636314.958:5979): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636314.961:5980): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=36365 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636314.984:5981): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636314.985:5982): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636315.001:5983): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636315.001:5984): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636315.002:5985): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=36379 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636315.025:5986): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636315.025:5987): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636315.041:5988): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636315.041:5989): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636315.042:5990): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=36402 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636315.102:5991): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636315.107:5992): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636315.123:5993): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636315.123:5994): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636315.124:5995): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=36416 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636315.158:5996): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636315.158:5997): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636315.174:5998): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636315.174:5999): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636315.175:6000): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=36431 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636315.249:6001): pid=36446 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636315.249:6002): pid=36446 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7173676B756D7A67757779676870706867717265636E6D67676D727A716E7A66203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363331342E3938393832362D33363335382D3133363139383832393136353537362F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636315.250:6003): pid=36446 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636315.253:6004): pid=36446 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636315.480:6005): pid=36446 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636315.480:6006): pid=36446 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636315.483:6007): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636315.483:6008): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636315.495:6009): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636315.495:6010): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636315.496:6011): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=36450 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636315.522:6012): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636315.522:6013): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636315.767:6014): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636315.767:6015): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636315.768:6016): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=36467 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636315.792:6017): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636315.792:6018): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636315.804:6019): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636315.804:6020): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636315.806:6021): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=36481 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636315.837:6022): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636315.837:6023): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636315.853:6024): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636315.853:6025): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636315.854:6026): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=36502 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636315.887:6027): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636315.887:6028): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636315.900:6029): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636315.900:6030): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636315.901:6031): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=36516 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636315.923:6032): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636315.923:6033): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636315.934:6034): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636315.934:6035): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636315.935:6036): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=36531 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636315.991:6037): pid=36546 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636315.991:6038): pid=36546 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D737665666F776773796369796B756F75656171787762707078646671726D6C62203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363331352E373935353333372D33363436352D3138303436353230313033353436352F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636315.992:6039): pid=36546 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636315.993:6040): pid=36546 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636316.214:6041): pid=36546 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636316.214:6042): pid=36546 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636316.218:6043): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636316.218:6044): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636316.231:6045): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636316.231:6046): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636316.232:6047): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=36550 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636316.255:6048): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636316.255:6049): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636316.579:6050): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636316.579:6051): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636316.582:6052): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=36569 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636316.608:6053): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636316.608:6054): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636316.623:6055): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636316.623:6056): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636316.624:6057): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=36583 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636316.660:6058): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636316.660:6059): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636316.680:6060): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636316.680:6061): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636316.682:6062): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=36604 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636316.723:6063): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636316.723:6064): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636316.740:6065): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636316.740:6066): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636316.743:6067): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=36618 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636316.767:6068): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636316.767:6069): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636316.782:6070): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636316.782:6071): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636316.783:6072): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=36633 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636316.852:6073): pid=36648 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636316.852:6074): pid=36648 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D77616C706163646D6B7978676F647174756A72716D7871656964646264766A75203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363331362E363131363537342D33363536372D3236383630333633343431383031332F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636316.853:6075): pid=36648 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636316.856:6076): pid=36648 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636317.054:6077): pid=36648 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636317.055:6078): pid=36648 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636317.059:6079): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636317.060:6080): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636317.071:6081): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636317.072:6082): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636317.073:6083): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=36654 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636317.097:6084): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636317.097:6085): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636317.471:6086): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636317.471:6087): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636317.473:6088): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=36671 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636317.502:6089): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636317.502:6090): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636317.516:6091): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636317.516:6092): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636317.519:6093): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=36685 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636317.545:6094): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636317.545:6095): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636317.574:6096): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636317.574:6097): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636317.576:6098): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=36706 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636317.622:6099): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636317.622:6100): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636317.634:6101): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636317.634:6102): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636317.635:6103): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=36720 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636317.660:6104): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636317.660:6105): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636317.671:6106): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636317.671:6107): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636317.673:6108): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=36735 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636317.734:6109): pid=36750 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636317.734:6110): pid=36750 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D73766B6777617861727273636F78797765736E62766A7A6E676A776E66716469203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363331372E353035303036332D33363636392D38383931363730393630373138382F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636317.735:6111): pid=36750 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636317.736:6112): pid=36750 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636317.903:6113): pid=36750 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636317.903:6114): pid=36750 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636317.906:6115): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636317.906:6116): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636317.918:6117): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636317.918:6118): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636317.919:6119): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=36754 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636317.938:6120): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636317.938:6121): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636318.143:6122): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636318.143:6123): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636318.144:6124): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=36770 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636318.168:6125): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636318.168:6126): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636318.181:6127): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636318.181:6128): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636318.183:6129): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=36784 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636318.214:6130): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636318.214:6131): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636318.241:6132): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636318.241:6133): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636318.242:6134): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=36805 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636318.278:6135): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636318.279:6136): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636318.290:6137): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636318.291:6138): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636318.292:6139): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=36819 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636318.313:6140): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636318.313:6141): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636318.325:6142): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636318.325:6143): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636318.326:6144): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=36834 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636318.379:6145): pid=36849 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636318.379:6146): pid=36849 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D756D6F6E6E726A666565757177696E68666B6A616A62797A797565626E686977203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363331382E313730383435352D33363636392D3139383737343938333133363832312F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636318.380:6147): pid=36849 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636318.382:6148): pid=36849 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636318.556:6149): pid=36849 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636318.556:6150): pid=36849 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636318.559:6151): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636318.559:6152): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636318.571:6153): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636318.571:6154): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636318.572:6155): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=36853 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636318.597:6156): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636318.597:6157): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636318.824:6158): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636318.824:6159): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636318.826:6160): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=36869 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636318.852:6161): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636318.852:6162): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636318.863:6163): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636318.863:6164): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636318.864:6165): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=36883 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636318.889:6166): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636318.889:6167): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636318.905:6168): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636318.905:6169): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636318.906:6170): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=36907 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636318.939:6171): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636318.939:6172): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636318.952:6173): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636318.952:6174): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636318.953:6175): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=36921 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636318.976:6176): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636318.976:6177): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636318.988:6178): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636318.988:6179): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636318.990:6180): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=36936 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636319.045:6181): pid=36952 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636319.046:6182): pid=36952 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D796867616D777673686E6A73626F78767176626C61676273636F676573646C79203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363331382E383534393337382D33363636392D31313831323836303438393731312F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636319.046:6183): pid=36952 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636319.047:6184): pid=36952 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636319.213:6185): pid=36952 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636319.213:6186): pid=36952 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636319.216:6187): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636319.217:6188): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636319.229:6189): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636319.229:6190): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636319.231:6191): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=36958 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636319.257:6192): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636319.257:6193): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636319.470:6194): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636319.470:6195): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636319.471:6196): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=36977 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636319.501:6197): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636319.501:6198): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636319.515:6199): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636319.515:6200): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636319.516:6201): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=36991 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636319.546:6202): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636319.546:6203): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636319.563:6204): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636319.563:6205): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636319.564:6206): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=37012 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636319.596:6207): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636319.596:6208): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636319.610:6209): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636319.610:6210): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636319.612:6211): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=37026 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636319.637:6212): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636319.637:6213): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636319.652:6214): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636319.652:6215): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636319.653:6216): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=37041 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636319.720:6217): pid=37056 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636319.720:6218): pid=37056 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D61757463706F776D74796B7A746D646475637A68756A797073756C7777787371203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363331392E353034343933322D33363636392D3136343632313338383239333234332F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636319.720:6219): pid=37056 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636319.722:6220): pid=37056 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636319.894:6221): pid=37056 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636319.894:6222): pid=37056 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636319.897:6223): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636319.897:6224): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636319.908:6225): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636319.908:6226): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636319.910:6227): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=37060 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636319.941:6228): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636319.941:6229): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636320.185:6230): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636320.185:6231): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636320.187:6232): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=37075 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636320.214:6233): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636320.214:6234): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636320.225:6235): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636320.225:6236): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636320.227:6237): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=37089 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636320.256:6238): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636320.256:6239): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636320.274:6240): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636320.274:6241): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636320.275:6242): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=37110 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636320.314:6243): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636320.314:6244): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636320.330:6245): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636320.330:6246): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636320.331:6247): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=37124 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636320.362:6248): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636320.362:6249): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636320.375:6250): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636320.375:6251): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636320.376:6252): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=37139 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636320.435:6253): pid=37154 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636320.435:6254): pid=37154 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E616162776865616E6B6E6A687A62706A636567796275697273796B73726875203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363332302E323136383138362D33363636392D3237373033313632373132363231322F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636320.435:6255): pid=37154 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636320.437:6256): pid=37154 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636320.641:6257): pid=37154 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636320.641:6258): pid=37154 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636320.644:6259): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636320.644:6260): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636320.655:6261): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636320.655:6262): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636320.657:6263): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=37158 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636320.678:6264): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636320.678:6265): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636320.884:6266): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636320.885:6267): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636320.887:6268): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=37173 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636320.909:6269): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636320.909:6270): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636320.920:6271): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636320.921:6272): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636320.922:6273): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=37187 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636320.948:6274): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636320.948:6275): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636320.965:6276): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636320.965:6277): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636320.966:6278): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=37208 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636320.997:6279): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636320.997:6280): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636321.011:6281): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636321.011:6282): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636321.012:6283): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=37222 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636321.055:6284): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636321.055:6285): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636321.069:6286): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636321.069:6287): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636321.070:6288): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=37237 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636321.126:6289): pid=37252 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636321.126:6290): pid=37252 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6774656A63686E62716A7672716D67737774636D7A777876737176736A717664203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363332302E393131393335362D33363636392D3131333530333037363337313635392F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636321.126:6291): pid=37252 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636321.128:6292): pid=37252 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636321.463:6293): pid=37252 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636321.463:6294): pid=37252 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636321.467:6295): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636321.468:6296): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636321.482:6297): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636321.482:6298): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636321.484:6299): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=37256 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636321.510:6300): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636321.510:6301): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636321.798:6302): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636321.798:6303): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636321.799:6304): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=37271 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636321.821:6305): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636321.821:6306): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636321.834:6307): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636321.834:6308): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636321.836:6309): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=37285 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636321.874:6310): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636321.874:6311): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636321.894:6312): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636321.894:6313): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636321.895:6314): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=37306 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636321.929:6315): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636321.929:6316): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636321.941:6317): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636321.941:6318): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636321.943:6319): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=37320 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636321.969:6320): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636321.969:6321): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636321.983:6322): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636321.983:6323): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636321.984:6324): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=37335 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636322.042:6325): pid=37350 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636322.042:6326): pid=37350 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D636B7579786D686A6B6C6F766B786A677176707A75696E666F6161756F747667203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363332312E383234353538352D33363636392D3136323830333135323236363731362F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636322.043:6327): pid=37350 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636322.044:6328): pid=37350 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636322.333:6329): pid=37350 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636322.333:6330): pid=37350 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636322.357:6331): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636322.357:6332): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636322.357:6333): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636322.357:6334): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636322.358:6335): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=37356 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636322.380:6336): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636322.380:6337): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636322.589:6338): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636322.589:6339): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636322.590:6340): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=37372 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636322.611:6341): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636322.611:6342): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636322.622:6343): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636322.622:6344): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636322.623:6345): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=37386 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636322.672:6346): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636322.672:6347): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636322.690:6348): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636322.690:6349): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636322.691:6350): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=37407 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636322.742:6351): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636322.742:6352): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636322.758:6353): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636322.758:6354): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636322.759:6355): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=37421 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636322.790:6356): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636322.790:6357): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636322.812:6358): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636322.812:6359): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636322.814:6360): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=37436 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636322.889:6361): pid=37451 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636322.890:6362): pid=37451 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A676C6D736F716B6D727874656F777379656F6A69727770736D6162637A6B68203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363332322E363134343134372D33363636392D38303230313130393635393836302F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636322.891:6363): pid=37451 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636322.893:6364): pid=37451 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636323.210:6365): pid=37451 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636323.210:6366): pid=37451 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636323.227:6367): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636323.227:6368): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636323.227:6369): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636323.227:6370): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636323.229:6371): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=37455 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636323.254:6372): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636323.254:6373): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636323.506:6374): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636323.506:6375): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636323.507:6376): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=37470 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636323.531:6377): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636323.531:6378): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636323.547:6379): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636323.547:6380): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636323.548:6381): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=37484 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636323.592:6382): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636323.593:6383): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636323.616:6384): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636323.616:6385): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636323.618:6386): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=37505 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636323.666:6387): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636323.666:6388): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636323.681:6389): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636323.681:6390): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636323.682:6391): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=37519 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636323.714:6392): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636323.714:6393): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636323.728:6394): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636323.728:6395): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636323.729:6396): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=37534 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636323.792:6397): pid=37549 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636323.792:6398): pid=37549 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7369617966667A69766F69696A696E70616C77787978757568676271636E7175203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363332332E353334393831372D33363636392D33383839313832333939313130382F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636323.793:6399): pid=37549 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636323.795:6400): pid=37549 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636324.023:6401): pid=37549 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636324.023:6402): pid=37549 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636324.026:6403): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636324.027:6404): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636324.039:6405): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636324.039:6406): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636324.040:6407): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=37553 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636324.061:6408): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636324.061:6409): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636324.262:6410): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636324.262:6411): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636324.263:6412): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=37568 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636324.284:6413): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636324.284:6414): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636324.295:6415): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636324.295:6416): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636324.296:6417): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=37582 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636324.356:6418): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636324.356:6419): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636324.410:6420): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636324.410:6421): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636324.411:6422): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=37603 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636324.446:6423): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636324.446:6424): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636324.461:6425): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636324.461:6426): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636324.462:6427): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=37617 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636324.485:6428): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636324.485:6429): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636324.500:6430): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636324.500:6431): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636324.501:6432): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=37632 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636324.556:6433): pid=37647 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636324.556:6434): pid=37647 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D62727A687565706E6772666F6C64786F6D6266786761616F79616A7870767A7A203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363332342E323836373530362D33363636392D35393038373135313732313832302F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636324.557:6435): pid=37647 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636324.559:6436): pid=37647 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636324.777:6437): pid=37647 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636324.777:6438): pid=37647 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636324.802:6439): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636324.802:6440): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636324.802:6441): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636324.802:6442): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636324.803:6443): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=37651 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636324.823:6444): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636324.823:6445): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636325.071:6446): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636325.071:6447): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636325.072:6448): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=37666 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636325.095:6449): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636325.095:6450): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636325.107:6451): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636325.107:6452): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636325.108:6453): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=37680 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636325.162:6454): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636325.162:6455): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636325.178:6456): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636325.178:6457): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636325.179:6458): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=37701 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636325.241:6459): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636325.241:6460): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636325.255:6461): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636325.255:6462): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636325.256:6463): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=37715 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636325.275:6464): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636325.275:6465): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636325.286:6466): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636325.287:6467): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636325.288:6468): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=37730 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636325.344:6469): pid=37745 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636325.345:6470): pid=37745 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6878737668686C6C6F7A6E74776B76716274667677617871786A6562736C656F203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363332352E303938323638332D33363636392D3236353338333036363430383037362F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636325.345:6471): pid=37745 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636325.347:6472): pid=37745 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636325.594:6473): pid=37745 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636325.595:6474): pid=37745 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636325.597:6475): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636325.598:6476): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636325.608:6477): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636325.608:6478): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636325.609:6479): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=37749 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636325.653:6480): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636325.653:6481): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636325.870:6482): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636325.870:6483): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636325.872:6484): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=37764 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636325.892:6485): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636325.892:6486): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636325.902:6487): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636325.902:6488): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636325.903:6489): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=37778 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636325.928:6490): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636325.928:6491): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636325.944:6492): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636325.944:6493): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636325.945:6494): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=37799 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636325.976:6495): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636325.976:6496): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636326.007:6497): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636326.007:6498): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636326.008:6499): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=37813 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636326.029:6500): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636326.029:6501): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636326.064:6502): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636326.064:6503): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636326.066:6504): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=37828 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636326.123:6505): pid=37843 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636326.124:6506): pid=37843 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D676B6D6769626D7A626B6D686B79776D757277637374786B69757A6C66786278203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363332352E3839343835382D33363636392D3234383937353634373330343934312F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636326.124:6507): pid=37843 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636326.126:6508): pid=37843 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636326.353:6509): pid=37843 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636326.353:6510): pid=37843 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636326.356:6511): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636326.356:6512): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636326.367:6513): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636326.367:6514): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636326.368:6515): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=37847 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636326.418:6516): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636326.418:6517): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636326.664:6518): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636326.664:6519): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636326.665:6520): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=37862 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636326.685:6521): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636326.685:6522): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636326.696:6523): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636326.696:6524): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636326.697:6525): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=37876 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636326.731:6526): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636326.731:6527): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636326.749:6528): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636326.749:6529): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636326.750:6530): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=37897 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636326.789:6531): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636326.789:6532): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636326.802:6533): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636326.802:6534): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636326.803:6535): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=37911 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636326.848:6536): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636326.848:6537): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636326.898:6538): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636326.898:6539): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636326.899:6540): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=37926 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636326.960:6541): pid=37941 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636326.961:6542): pid=37941 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7671726A757074687A666A6A7768736B676C6B6F766C7A6E7561666376746564203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363332362E363837373538342D33363636392D3135323330313632363234373038352F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636326.961:6543): pid=37941 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636326.963:6544): pid=37941 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636327.235:6545): pid=37941 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636327.236:6546): pid=37941 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636327.239:6547): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636327.239:6548): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636327.252:6549): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636327.252:6550): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636327.253:6551): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=37951 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636327.289:6552): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636327.289:6553): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636327.482:6554): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636327.482:6555): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636327.483:6556): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=37967 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636327.501:6557): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636327.501:6558): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636327.512:6559): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636327.512:6560): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636327.513:6561): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=37981 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636327.565:6562): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636327.565:6563): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636327.585:6564): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636327.585:6565): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636327.586:6566): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=38002 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636327.619:6567): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636327.619:6568): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636327.635:6569): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636327.635:6570): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636327.636:6571): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=38016 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636327.656:6572): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636327.656:6573): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636327.668:6574): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636327.668:6575): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636327.669:6576): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=38031 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636327.727:6577): pid=38046 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636327.727:6578): pid=38046 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6566677A616B7164726E747376687376667171626B6F6D707A736B61757A7861203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363332372E353034333939382D33363636392D3234303934353738373732303637302F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636327.727:6579): pid=38046 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636327.729:6580): pid=38046 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636328.017:6581): pid=38046 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636328.017:6582): pid=38046 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636328.020:6583): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636328.020:6584): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636328.031:6585): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636328.031:6586): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636328.032:6587): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=38050 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636328.052:6588): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636328.052:6589): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636328.254:6590): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636328.254:6591): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636328.255:6592): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=38065 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636328.275:6593): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636328.275:6594): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636328.287:6595): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636328.287:6596): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636328.289:6597): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=38079 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636328.330:6598): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636328.330:6599): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636328.346:6600): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636328.346:6601): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636328.347:6602): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=38100 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636328.405:6603): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636328.405:6604): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636328.419:6605): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636328.419:6606): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636328.420:6607): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=38114 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636328.456:6608): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636328.457:6609): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636328.469:6610): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636328.469:6611): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636328.470:6612): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=38129 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636328.526:6613): pid=38144 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636328.526:6614): pid=38144 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7867697A6F637876636778716B61656273616E686A7A636C63626B7569767A7A203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363332382E323738313232322D33363636392D31393836313932303739363539372F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636328.526:6615): pid=38144 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636328.528:6616): pid=38144 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636328.761:6617): pid=38144 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636328.762:6618): pid=38144 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636328.764:6619): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636328.764:6620): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636328.776:6621): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636328.776:6622): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636328.777:6623): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=38148 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636328.797:6624): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636328.797:6625): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636329.004:6626): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636329.004:6627): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636329.005:6628): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=38163 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636329.024:6629): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636329.024:6630): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636329.035:6631): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636329.035:6632): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636329.036:6633): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=38177 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636329.087:6634): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636329.087:6635): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636329.104:6636): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636329.104:6637): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636329.105:6638): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=38198 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636329.162:6639): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636329.162:6640): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636329.174:6641): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636329.174:6642): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636329.175:6643): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=38212 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636329.196:6644): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636329.196:6645): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636329.206:6646): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636329.207:6647): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636329.208:6648): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=38227 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636329.263:6649): pid=38242 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636329.263:6650): pid=38242 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7178696D6E7267746B6F6E706D686773666A73676575746A726F6268656B7672203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363332392E303237323735362D33363636392D3135323031383437383132313630312F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636329.264:6651): pid=38242 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636329.265:6652): pid=38242 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636329.519:6653): pid=38242 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636329.519:6654): pid=38242 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636329.521:6655): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636329.521:6656): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636329.532:6657): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636329.532:6658): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636329.533:6659): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=38246 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636329.592:6660): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636329.592:6661): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636329.788:6662): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636329.788:6663): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636329.789:6664): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=38261 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636329.816:6665): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636329.816:6666): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636329.828:6667): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636329.828:6668): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636329.828:6669): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=38275 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636329.854:6670): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636329.854:6671): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636329.870:6672): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636329.870:6673): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636329.871:6674): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=38296 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636329.904:6675): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636329.904:6676): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636329.917:6677): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636329.917:6678): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636329.918:6679): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=38310 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636329.943:6680): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636329.943:6681): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636329.961:6682): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636329.961:6683): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636329.962:6684): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=38325 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636330.020:6685): pid=38340 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636330.020:6686): pid=38340 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F646961646478757966666768757A646469686277757A6177677467626C7874203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363332392E383230303137382D33363636392D3234313238343632393536343839302F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636330.020:6687): pid=38340 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636330.022:6688): pid=38340 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636330.253:6689): pid=38340 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636330.253:6690): pid=38340 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636330.256:6691): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636330.256:6692): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636330.268:6693): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636330.268:6694): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636330.269:6695): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=38344 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636330.318:6696): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636330.318:6697): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636330.521:6698): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636330.521:6699): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636330.522:6700): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=38359 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636330.543:6701): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636330.543:6702): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636330.557:6703): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636330.557:6704): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636330.558:6705): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=38373 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636330.582:6706): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636330.582:6707): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636330.602:6708): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636330.603:6709): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636330.604:6710): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=38394 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636330.663:6711): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636330.663:6712): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636330.676:6713): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636330.676:6714): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636330.677:6715): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=38408 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636330.710:6716): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636330.710:6717): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636330.722:6718): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636330.722:6719): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636330.723:6720): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=38423 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636330.780:6721): pid=38438 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636330.780:6722): pid=38438 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D727669666F61726D75786E756F6F6D74796F7A6871647261736E6E7A68676E77203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363333302E353436383632382D33363636392D32363138363738313832393330342F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636330.781:6723): pid=38438 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636330.783:6724): pid=38438 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636331.059:6725): pid=38438 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636331.059:6726): pid=38438 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636331.062:6727): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636331.062:6728): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636331.076:6729): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636331.076:6730): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636331.077:6731): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=38442 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636331.099:6732): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636331.099:6733): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636331.367:6734): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636331.367:6735): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636331.368:6736): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=38457 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636331.388:6737): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636331.388:6738): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636331.399:6739): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636331.399:6740): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636331.400:6741): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=38471 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636331.424:6742): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636331.424:6743): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636331.440:6744): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636331.441:6745): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636331.442:6746): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=38492 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636331.479:6747): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636331.479:6748): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636331.492:6749): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636331.492:6750): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636331.493:6751): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=38506 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636331.544:6752): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636331.544:6753): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636331.556:6754): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636331.556:6755): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636331.557:6756): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=38521 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636331.612:6757): pid=38536 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636331.612:6758): pid=38536 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7968746A636271796F647A667964637773636372737879716A61616163747979203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363333312E3339303837372D33363636392D3134303130323539363535303234352F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636331.612:6759): pid=38536 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636331.614:6760): pid=38536 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636331.879:6761): pid=38536 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636331.879:6762): pid=38536 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636331.882:6763): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636331.882:6764): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636331.893:6765): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636331.893:6766): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636331.894:6767): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=38540 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636331.951:6768): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636331.951:6769): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636332.152:6770): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636332.152:6771): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636332.153:6772): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=38555 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636332.175:6773): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636332.175:6774): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636332.188:6775): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636332.188:6776): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636332.189:6777): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=38569 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636332.237:6778): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636332.237:6779): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636332.254:6780): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636332.255:6781): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636332.256:6782): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=38590 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636332.286:6783): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636332.286:6784): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636332.298:6785): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636332.298:6786): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636332.299:6787): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=38604 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636332.320:6788): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636332.320:6789): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636332.333:6790): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636332.333:6791): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636332.334:6792): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=38619 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636332.388:6793): pid=38634 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636332.389:6794): pid=38634 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D69626C726C776C6970756A6D63726F63756761706F7665776172666573657677203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363333322E313738333939332D33363636392D31383332343633313038353638382F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636332.389:6795): pid=38634 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636332.391:6796): pid=38634 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636332.672:6797): pid=38634 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636332.672:6798): pid=38634 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636332.675:6799): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636332.675:6800): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636332.695:6801): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636332.695:6802): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636332.697:6803): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=38638 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636332.718:6804): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636332.718:6805): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636332.934:6806): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636332.934:6807): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636332.935:6808): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=38653 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636332.963:6809): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636332.963:6810): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636332.977:6811): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636332.977:6812): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636332.979:6813): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=38667 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636333.008:6814): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636333.008:6815): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636333.026:6816): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636333.026:6817): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636333.027:6818): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=38688 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636333.069:6819): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636333.069:6820): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636333.080:6821): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636333.080:6822): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636333.081:6823): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=38702 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636333.101:6824): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636333.101:6825): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636333.113:6826): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636333.113:6827): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636333.115:6828): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=38717 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636333.174:6829): pid=38732 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636333.174:6830): pid=38732 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D74767A74696C6F63776372636C6D717866706178666761646A737A6D6B746A67203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363333322E393636383330352D33363636392D39373235333739343738383330332F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636333.174:6831): pid=38732 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636333.176:6832): pid=38732 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636333.476:6833): pid=38732 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636333.477:6834): pid=38732 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636333.479:6835): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636333.479:6836): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636333.491:6837): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636333.491:6838): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636333.492:6839): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=38736 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636333.515:6840): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636333.515:6841): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636333.726:6842): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636333.726:6843): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636333.727:6844): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=38751 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636333.747:6845): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636333.747:6846): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636333.757:6847): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636333.757:6848): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636333.759:6849): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=38765 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636333.803:6850): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636333.803:6851): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636333.825:6852): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636333.825:6853): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636333.826:6854): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=38786 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636333.904:6855): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636333.904:6856): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636333.917:6857): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636333.917:6858): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636333.918:6859): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=38807 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636333.962:6860): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636333.962:6861): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636334.008:6862): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636334.008:6863): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636334.010:6864): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=38822 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636334.062:6865): pid=38837 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636334.062:6866): pid=38837 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D76746A656A67707364696C6569626469616775726768736A6D68716A63766175203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363333332E373439363231322D33363636392D3234303332323239373633333739332F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636334.063:6867): pid=38837 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636334.064:6868): pid=38837 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636334.335:6869): pid=38837 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636334.336:6870): pid=38837 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636334.350:6871): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636334.350:6872): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636334.350:6873): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636334.350:6874): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636334.352:6875): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=38841 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636334.394:6876): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636334.394:6877): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636334.592:6878): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636334.592:6879): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636334.594:6880): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=38856 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636334.613:6881): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636334.613:6882): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636334.626:6883): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636334.626:6884): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636334.627:6885): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=38870 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636334.667:6886): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636334.667:6887): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636334.683:6888): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636334.683:6889): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636334.684:6890): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=38891 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636334.724:6891): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636334.724:6892): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636334.736:6893): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636334.736:6894): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636334.737:6895): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=38905 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636334.760:6896): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636334.760:6897): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636334.772:6898): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636334.772:6899): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636334.773:6900): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=38920 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636334.828:6901): pid=38935 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636334.828:6902): pid=38935 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D67766B7573707465686F7672687A6F6B696F76726274616174667366756A7779203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363333342E363136353638382D33363636392D3136303331373038333430383635392F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636334.829:6903): pid=38935 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636334.831:6904): pid=38935 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636335.095:6905): pid=38935 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636335.095:6906): pid=38935 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636335.110:6907): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636335.110:6908): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636335.114:6909): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636335.114:6910): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636335.115:6911): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=38939 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636335.159:6912): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636335.159:6913): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636335.374:6914): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636335.374:6915): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636335.375:6916): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=38954 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636335.394:6917): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636335.394:6918): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636335.407:6919): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636335.407:6920): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636335.408:6921): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=38968 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636335.431:6922): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636335.431:6923): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636335.456:6924): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636335.456:6925): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636335.457:6926): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=38989 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636335.487:6927): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636335.487:6928): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636335.499:6929): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636335.499:6930): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636335.500:6931): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=39003 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636335.525:6932): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636335.525:6933): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636335.538:6934): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636335.538:6935): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636335.540:6936): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=39018 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636335.605:6937): pid=39033 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636335.605:6938): pid=39033 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D707167706774666B757A6574736E7268776A6A716F786372617768776E716966203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363333352E333936373939332D33363636392D3231323835313037313836363733382F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636335.605:6939): pid=39033 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636335.607:6940): pid=39033 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636335.902:6941): pid=39033 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636335.902:6942): pid=39033 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636335.925:6943): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636335.925:6944): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636335.926:6945): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636335.926:6946): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636335.928:6947): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=39037 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636335.968:6948): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636335.968:6949): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636336.198:6950): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636336.198:6951): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636336.199:6952): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=39052 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636336.220:6953): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636336.220:6954): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636336.231:6955): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636336.231:6956): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636336.232:6957): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=39066 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636336.278:6958): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636336.278:6959): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636336.294:6960): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636336.294:6961): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636336.295:6962): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=39087 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636336.330:6963): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636336.330:6964): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636336.342:6965): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636336.343:6966): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636336.344:6967): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=39102 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636336.378:6968): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636336.378:6969): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636336.394:6970): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636336.394:6971): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636336.395:6972): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=39117 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636336.448:6973): pid=39132 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636336.448:6974): pid=39132 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D73756B697A74736D7964666C646C787263736168716F787371696A7572677176203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363333362E323231373036392D33363636392D3131363837313539303130393330312F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636336.449:6975): pid=39132 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636336.450:6976): pid=39132 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636336.718:6977): pid=39132 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636336.718:6978): pid=39132 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636336.721:6979): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636336.721:6980): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636336.732:6981): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636336.732:6982): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636336.733:6983): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=39143 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636336.764:6984): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636336.764:6985): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636337.030:6986): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636337.030:6987): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636337.031:6988): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=39161 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636337.056:6989): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636337.056:6990): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636337.074:6991): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636337.074:6992): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636337.075:6993): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=39175 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636337.123:6994): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636337.123:6995): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636337.140:6996): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636337.140:6997): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636337.141:6998): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=39196 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636337.176:6999): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636337.176:7000): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636337.192:7001): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636337.192:7002): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636337.193:7003): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=39210 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636337.216:7004): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636337.216:7005): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636337.228:7006): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636337.228:7007): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636337.229:7008): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=39225 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636337.298:7009): pid=39240 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636337.299:7010): pid=39240 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C726C7063706B736E6F7669786A7A7A796E6976737763656E77736C77616C62203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363333372E303539393136352D33363636392D3131313633363537393532393633312F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636337.299:7011): pid=39240 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636337.302:7012): pid=39240 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636337.480:7013): pid=39240 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636337.480:7014): pid=39240 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636337.483:7015): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636337.483:7016): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636337.498:7017): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636337.498:7018): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636337.499:7019): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=39244 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636337.526:7020): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636337.526:7021): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636337.761:7022): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636337.761:7023): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636337.762:7024): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=39260 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636337.789:7025): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636337.789:7026): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636337.800:7027): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636337.800:7028): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636337.801:7029): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=39274 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636337.837:7030): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636337.837:7031): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636337.853:7032): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636337.853:7033): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636337.854:7034): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=39295 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636337.898:7035): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636337.898:7036): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636337.910:7037): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636337.911:7038): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636337.912:7039): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=39309 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636337.935:7040): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636337.936:7041): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636337.949:7042): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636337.950:7043): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636337.951:7044): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=39324 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636338.026:7045): pid=39339 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636338.026:7046): pid=39339 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7966617377757373696C62687761706A657A756861787270736F6A7A6E61706E203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363333372E373931333936312D33363636392D31333438303335363534383238352F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636338.027:7047): pid=39339 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636338.029:7048): pid=39339 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636338.215:7049): pid=39339 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636338.215:7050): pid=39339 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636338.218:7051): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636338.218:7052): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636338.230:7053): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636338.230:7054): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636338.231:7055): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=39343 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636338.261:7056): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636338.261:7057): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636338.511:7058): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636338.512:7059): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636338.513:7060): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=39358 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636338.539:7061): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636338.539:7062): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636338.551:7063): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636338.551:7064): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636338.552:7065): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=39372 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636338.585:7066): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636338.585:7067): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636338.605:7068): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636338.605:7069): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636338.607:7070): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=39393 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636338.647:7071): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636338.647:7072): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636338.661:7073): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636338.661:7074): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636338.662:7075): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=39407 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636338.685:7076): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636338.685:7077): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636338.704:7078): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636338.704:7079): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636338.706:7080): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=39422 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636338.772:7081): pid=39437 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636338.772:7082): pid=39437 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6872697668766A6C656374647062756D71726F746678786F686D777777686575203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363333382E353430393036372D33363636392D3232393631383532353832393733352F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636338.773:7083): pid=39437 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636338.775:7084): pid=39437 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636338.973:7085): pid=39437 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636338.973:7086): pid=39437 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636338.976:7087): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636338.976:7088): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636338.987:7089): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636338.987:7090): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636338.988:7091): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=39441 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636339.008:7092): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636339.008:7093): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636339.214:7094): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636339.214:7095): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636339.215:7096): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=39456 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636339.236:7097): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636339.236:7098): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636339.246:7099): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636339.246:7100): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636339.248:7101): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=39471 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636339.271:7102): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636339.271:7103): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636339.288:7104): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636339.288:7105): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636339.289:7106): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=39495 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636339.325:7107): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636339.325:7108): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636339.338:7109): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636339.338:7110): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636339.339:7111): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=39509 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636339.361:7112): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636339.361:7113): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636339.372:7114): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636339.372:7115): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636339.373:7116): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=39524 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636339.428:7117): pid=39539 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636339.428:7118): pid=39539 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D696661667A6E67766774796F707A6177657464666E637874756C706D676E696E203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363333392E323338303434332D33363636392D3230393938363539393739383037382F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636339.429:7119): pid=39539 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636339.430:7120): pid=39539 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636339.598:7121): pid=39539 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636339.599:7122): pid=39539 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636339.601:7123): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636339.602:7124): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636339.613:7125): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636339.613:7126): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636339.614:7127): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=39543 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636339.638:7128): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636339.638:7129): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636339.856:7130): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636339.856:7131): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636339.857:7132): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=39558 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636339.878:7133): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636339.878:7134): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636339.891:7135): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636339.891:7136): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636339.892:7137): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=39572 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636339.914:7138): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636339.914:7139): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636339.930:7140): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636339.931:7141): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636339.932:7142): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=39593 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636339.962:7143): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636339.962:7144): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636339.974:7145): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636339.974:7146): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636339.975:7147): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=39607 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636339.995:7148): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636339.995:7149): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636340.006:7150): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636340.006:7151): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636340.007:7152): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=39622 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636340.065:7153): pid=39637 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636340.065:7154): pid=39637 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D77736F74747265787968637879637A6E6A6B746578766771796A7A657664666D203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363333392E383830373532382D33363636392D35343038313835313639393030322F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636340.066:7155): pid=39637 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636340.067:7156): pid=39637 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636340.239:7157): pid=39637 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636340.239:7158): pid=39637 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636340.242:7159): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636340.242:7160): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636340.252:7161): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636340.252:7162): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636340.253:7163): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=39641 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636340.274:7164): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636340.275:7165): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636341.122:7166): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636341.122:7167): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636341.125:7168): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=39679 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636341.154:7169): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636341.154:7170): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636341.164:7171): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636341.165:7172): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636341.166:7173): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=39693 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636341.191:7174): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636341.191:7175): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636341.207:7176): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636341.207:7177): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636341.208:7178): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=39716 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636341.242:7179): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636341.242:7180): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636341.257:7181): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636341.257:7182): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636341.258:7183): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=39730 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636341.277:7184): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636341.277:7185): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636341.288:7186): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636341.288:7187): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636341.289:7188): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=39745 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636341.352:7189): pid=39760 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636341.352:7190): pid=39760 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D76787A737464706F7962636470747A6E7279687A66736C68726D6B6A646E7566203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363334312E3135353731352D33393637372D39373637353938303434323339372F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636341.352:7191): pid=39760 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636341.354:7192): pid=39760 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636341.550:7193): pid=39760 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636341.550:7194): pid=39760 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636341.552:7195): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636341.552:7196): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636341.563:7197): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636341.563:7198): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636341.564:7199): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=39781 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636341.582:7200): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636341.582:7201): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636341.866:7202): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636341.866:7203): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636341.867:7204): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=39800 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636341.885:7205): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636341.885:7206): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636341.895:7207): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636341.895:7208): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636341.896:7209): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=39814 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636341.918:7210): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636341.918:7211): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636342.041:7212): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636342.041:7213): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636342.042:7214): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=39835 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636342.072:7215): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636342.072:7216): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636342.083:7217): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636342.083:7218): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636342.084:7219): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=39849 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636342.104:7220): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636342.104:7221): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636342.115:7222): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636342.115:7223): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636342.116:7224): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=39864 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636342.169:7225): pid=39879 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636342.169:7226): pid=39879 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D61776D64777762736F71696F67736D6174616D6F6D686B74796B7778647A6575203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363334312E383836373834382D33393739382D3130313335393139393238313039352F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636342.170:7227): pid=39879 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636342.171:7228): pid=39879 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636342.322:7229): pid=39879 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636342.322:7230): pid=39879 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636342.325:7231): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636342.325:7232): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636342.339:7233): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636342.339:7234): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636342.340:7235): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=39884 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636342.362:7236): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636342.362:7237): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636342.373:7238): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636342.373:7239): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636342.374:7240): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=39898 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636342.394:7241): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636342.394:7242): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636342.411:7243): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636342.411:7244): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636342.412:7245): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=39914 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636342.442:7246): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636342.442:7247): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636342.455:7248): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636342.455:7249): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636342.456:7250): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=39928 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636342.477:7251): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636342.477:7252): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636342.489:7253): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636342.489:7254): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636342.490:7255): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=39943 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636342.543:7256): pid=39958 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636342.543:7257): pid=39958 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B6C756F626D6E657378786773616261616B72676D727562626378756D676864203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363334312E383836373834382D33393739382D3130313335393139393238313039352F416E736962616C6C5A5F636F70792E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636342.544:7258): pid=39958 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636342.545:7259): pid=39958 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636342.708:7260): pid=39958 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636342.708:7261): pid=39958 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636342.710:7262): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636342.710:7263): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636342.721:7264): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636342.721:7265): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636342.722:7266): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=39962 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636342.741:7267): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636342.741:7268): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636342.998:7269): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636342.998:7270): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636342.999:7271): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=39979 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636343.019:7272): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636343.019:7273): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636343.030:7274): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636343.030:7275): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636343.031:7276): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=39993 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636343.056:7277): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636343.056:7278): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636343.073:7279): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636343.073:7280): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636343.074:7281): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=40014 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636343.112:7282): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636343.112:7283): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636343.129:7284): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636343.129:7285): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636343.130:7286): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=40028 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636343.149:7287): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636343.149:7288): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636343.161:7289): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636343.161:7290): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636343.162:7291): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=40043 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636343.214:7292): pid=40058 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636343.214:7293): pid=40058 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd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exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636343.215:7294): pid=40058 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636343.217:7295): pid=40058 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=BPF msg=audit(1744636343.967:7296): prog-id=302 op=LOAD type=SYSCALL msg=audit(1744636343.967:7296): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001c7c48 a2=90 a3=0 items=0 ppid=40093 pid=40103 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636343.967:7296): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32616132383965373830396637616130316166666236633132 type=BPF msg=audit(1744636343.967:7297): prog-id=303 op=LOAD type=SYSCALL msg=audit(1744636343.967:7297): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c0001c79d8 a2=90 a3=0 items=0 ppid=40093 pid=40103 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636343.967:7297): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32616132383965373830396637616130316166666236633132 type=BPF msg=audit(1744636343.967:7298): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636343.967:7299): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636343.967:7300): prog-id=304 op=LOAD type=SYSCALL msg=audit(1744636343.967:7300): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001c7eb0 a2=90 a3=0 items=0 ppid=40093 pid=40103 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636343.967:7300): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32616132383965373830396637616130316166666236633132 type=BPF msg=audit(1744636344.162:7301): prog-id=305 op=LOAD type=BPF msg=audit(1744636344.163:7302): prog-id=306 op=LOAD type=SYSCALL msg=audit(1744636344.163:7302): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000239ad0 a2=90 a3=0 items=0 ppid=40240 pid=40260 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636344.163:7302): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30313137363536393230653033663137626264386532373036 type=BPF msg=audit(1744636344.163:7303): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636344.163:7304): prog-id=307 op=LOAD type=SYSCALL msg=audit(1744636344.163:7304): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000239c48 a2=90 a3=0 items=0 ppid=40240 pid=40260 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636344.163:7304): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30313137363536393230653033663137626264386532373036 type=BPF msg=audit(1744636344.164:7305): prog-id=308 op=LOAD type=SYSCALL msg=audit(1744636344.164:7305): arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=c0002399d8 a2=90 a3=0 items=0 ppid=40240 pid=40260 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636344.164:7305): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30313137363536393230653033663137626264386532373036 type=BPF msg=audit(1744636344.164:7306): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636344.164:7307): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636344.164:7308): prog-id=309 op=LOAD type=SYSCALL msg=audit(1744636344.164:7308): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000239eb0 a2=90 a3=0 items=0 ppid=40240 pid=40260 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636344.164:7308): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30313137363536393230653033663137626264386532373036 type=BPF msg=audit(1744636344.305:7309): prog-id=310 op=LOAD type=BPF msg=audit(1744636344.306:7310): prog-id=311 op=LOAD type=SYSCALL msg=audit(1744636344.306:7310): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000243ad0 a2=90 a3=0 items=0 ppid=40409 pid=40440 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636344.306:7310): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32343639653431393465383538333463663835636666343235 type=BPF msg=audit(1744636344.307:7311): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636344.307:7312): prog-id=312 op=LOAD type=SYSCALL msg=audit(1744636344.307:7312): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000243c48 a2=90 a3=0 items=0 ppid=40409 pid=40440 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636344.307:7312): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32343639653431393465383538333463663835636666343235 type=BPF msg=audit(1744636344.307:7313): prog-id=313 op=LOAD type=SYSCALL msg=audit(1744636344.307:7313): arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=c0002439d8 a2=90 a3=0 items=0 ppid=40409 pid=40440 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636344.307:7313): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32343639653431393465383538333463663835636666343235 type=BPF msg=audit(1744636344.308:7314): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636344.308:7315): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636344.308:7316): prog-id=314 op=LOAD type=SYSCALL msg=audit(1744636344.308:7316): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000243eb0 a2=90 a3=0 items=0 ppid=40409 pid=40440 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636344.308:7316): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32343639653431393465383538333463663835636666343235 type=BPF msg=audit(1744636344.376:7317): prog-id=315 op=LOAD type=BPF msg=audit(1744636344.377:7318): prog-id=316 op=LOAD type=SYSCALL msg=audit(1744636344.377:7318): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001b9ad0 a2=90 a3=0 items=0 ppid=40572 pid=40627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636344.377:7318): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38643430386230663839373763303166633461386262636139 type=BPF msg=audit(1744636344.377:7319): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636344.378:7320): prog-id=317 op=LOAD type=SYSCALL msg=audit(1744636344.378:7320): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001b9c48 a2=90 a3=0 items=0 ppid=40572 pid=40627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636344.378:7320): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38643430386230663839373763303166633461386262636139 type=BPF msg=audit(1744636344.378:7321): prog-id=318 op=LOAD type=SYSCALL msg=audit(1744636344.378:7321): arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=c0001b99d8 a2=90 a3=0 items=0 ppid=40572 pid=40627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636344.378:7321): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38643430386230663839373763303166633461386262636139 type=BPF msg=audit(1744636344.378:7322): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636344.379:7323): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636344.379:7324): prog-id=319 op=LOAD type=SYSCALL msg=audit(1744636344.379:7324): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001b9eb0 a2=90 a3=0 items=0 ppid=40572 pid=40627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636344.379:7324): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38643430386230663839373763303166633461386262636139 type=BPF msg=audit(1744636344.382:7325): prog-id=320 op=LOAD type=BPF msg=audit(1744636344.382:7326): prog-id=321 op=LOAD type=SYSCALL msg=audit(1744636344.382:7326): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00011bad0 a2=90 a3=0 items=0 ppid=40546 pid=40620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636344.382:7326): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38313536373432353130366630386233626166363234333633 type=BPF msg=audit(1744636344.382:7327): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636344.383:7328): prog-id=322 op=LOAD type=SYSCALL msg=audit(1744636344.383:7328): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00011bc48 a2=90 a3=0 items=0 ppid=40546 pid=40620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636344.383:7328): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38313536373432353130366630386233626166363234333633 type=BPF msg=audit(1744636344.383:7329): prog-id=323 op=LOAD type=SYSCALL msg=audit(1744636344.383:7329): arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=c00011b9d8 a2=90 a3=0 items=0 ppid=40546 pid=40620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636344.383:7329): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38313536373432353130366630386233626166363234333633 type=BPF msg=audit(1744636344.383:7330): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636344.383:7331): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636344.383:7332): prog-id=324 op=LOAD type=SYSCALL msg=audit(1744636344.383:7332): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00011beb0 a2=90 a3=0 items=0 ppid=40546 pid=40620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636344.383:7332): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38313536373432353130366630386233626166363234333633 type=BPF msg=audit(1744636344.423:7333): prog-id=325 op=LOAD type=BPF msg=audit(1744636344.424:7334): prog-id=326 op=LOAD type=SYSCALL msg=audit(1744636344.424:7334): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00019bad0 a2=90 a3=0 items=0 ppid=40594 pid=40649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636344.424:7334): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35386232616630646665343564323335663764633462333663 type=BPF msg=audit(1744636344.424:7335): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636344.424:7336): prog-id=327 op=LOAD type=SYSCALL msg=audit(1744636344.424:7336): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00019bc48 a2=90 a3=0 items=0 ppid=40594 pid=40649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636344.424:7336): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35386232616630646665343564323335663764633462333663 type=BPF msg=audit(1744636344.424:7337): prog-id=328 op=LOAD type=SYSCALL msg=audit(1744636344.424:7337): arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=c00019b9d8 a2=90 a3=0 items=0 ppid=40594 pid=40649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636344.424:7337): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35386232616630646665343564323335663764633462333663 type=BPF msg=audit(1744636344.424:7338): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636344.424:7339): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636344.424:7340): prog-id=329 op=LOAD type=SYSCALL msg=audit(1744636344.424:7340): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00019beb0 a2=90 a3=0 items=0 ppid=40594 pid=40649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636344.424:7340): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35386232616630646665343564323335663764633462333663 type=BPF msg=audit(1744636344.451:7341): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636344.494:7342): prog-id=330 op=LOAD type=BPF msg=audit(1744636344.497:7343): prog-id=331 op=LOAD type=SYSCALL msg=audit(1744636344.497:7343): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001c1ad0 a2=90 a3=0 items=0 ppid=40657 pid=40828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636344.497:7343): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38306636336537346637376539313362626531353837663536 type=BPF msg=audit(1744636344.497:7344): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636344.497:7345): prog-id=332 op=LOAD type=SYSCALL msg=audit(1744636344.497:7345): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001c1c48 a2=90 a3=0 items=0 ppid=40657 pid=40828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636344.497:7345): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38306636336537346637376539313362626531353837663536 type=BPF msg=audit(1744636344.497:7346): prog-id=333 op=LOAD type=SYSCALL msg=audit(1744636344.497:7346): arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=c0001c19d8 a2=90 a3=0 items=0 ppid=40657 pid=40828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636344.497:7346): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38306636336537346637376539313362626531353837663536 type=BPF msg=audit(1744636344.497:7347): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636344.497:7348): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636344.497:7349): prog-id=334 op=LOAD type=SYSCALL msg=audit(1744636344.497:7349): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001c1eb0 a2=90 a3=0 items=0 ppid=40657 pid=40828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636344.497:7349): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38306636336537346637376539313362626531353837663536 type=BPF msg=audit(1744636344.714:7350): prog-id=335 op=LOAD type=BPF msg=audit(1744636344.715:7351): prog-id=336 op=LOAD type=SYSCALL msg=audit(1744636344.715:7351): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000125ad0 a2=90 a3=0 items=0 ppid=41135 pid=41173 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636344.715:7351): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36643265663864316264396164613464313633383037343038 type=BPF msg=audit(1744636344.715:7352): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636344.718:7353): prog-id=337 op=LOAD type=SYSCALL msg=audit(1744636344.718:7353): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000125c48 a2=90 a3=0 items=0 ppid=41135 pid=41173 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636344.718:7353): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36643265663864316264396164613464313633383037343038 type=BPF msg=audit(1744636344.718:7354): prog-id=338 op=LOAD type=SYSCALL msg=audit(1744636344.718:7354): arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=c0001259d8 a2=90 a3=0 items=0 ppid=41135 pid=41173 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636344.718:7354): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36643265663864316264396164613464313633383037343038 type=BPF msg=audit(1744636344.718:7355): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636344.718:7356): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636344.718:7357): prog-id=339 op=LOAD type=SYSCALL msg=audit(1744636344.718:7357): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000125eb0 a2=90 a3=0 items=0 ppid=41135 pid=41173 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636344.718:7357): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36643265663864316264396164613464313633383037343038 type=USER_END msg=audit(1744636344.857:7358): pid=40058 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636344.858:7359): pid=40058 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636344.861:7360): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636344.861:7361): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636344.874:7362): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636344.874:7363): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636344.875:7364): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=41274 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636344.905:7365): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636344.905:7366): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636345.442:7367): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636345.442:7368): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636345.443:7369): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=41309 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636345.464:7370): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636345.464:7371): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636345.473:7372): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636345.473:7373): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636345.474:7374): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=41323 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636345.496:7375): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636345.496:7376): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636345.513:7377): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636345.513:7378): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636345.514:7379): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=41344 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636345.550:7380): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636345.550:7381): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636345.562:7382): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636345.562:7383): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636345.563:7384): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=41358 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636345.587:7385): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636345.587:7386): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636345.602:7387): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636345.602:7388): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636345.603:7389): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=41373 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636345.660:7390): pid=41388 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636345.660:7391): pid=41388 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D656E766D797770737572726B6C67656F626B726378726A736972716E64746A77203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363334352E343635313438342D34313330352D3232363634343738313434303130302F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636345.661:7392): pid=41388 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636345.663:7393): pid=41388 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636359.055:7394): pid=41388 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636359.055:7395): pid=41388 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636359.059:7396): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636359.063:7397): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636359.073:7398): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636359.073:7399): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636359.074:7400): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=41883 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636359.112:7401): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636359.112:7402): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636359.383:7403): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636359.383:7404): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636359.384:7405): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=41899 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636359.429:7406): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636359.429:7407): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636359.439:7408): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636359.439:7409): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636359.440:7410): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=41913 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636359.501:7411): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636359.501:7412): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636359.518:7413): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636359.518:7414): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636359.522:7415): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=41934 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636359.591:7416): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636359.591:7417): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636359.606:7418): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636359.606:7419): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636359.607:7420): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=41948 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636359.653:7421): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636359.653:7422): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636359.667:7423): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636359.667:7424): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636359.668:7425): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=41963 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636359.757:7426): pid=41978 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636359.758:7427): pid=41978 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C65767A75786C776A7664627A756F7769687A796D70636B6B6B67796F757778203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363335392E343331303630362D34313330352D3235313632373338393339333938352F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636359.759:7428): pid=41978 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636359.764:7429): pid=41978 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636360.218:7430): pid=41978 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636360.218:7431): pid=41978 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636360.220:7432): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636360.221:7433): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636360.231:7434): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636360.231:7435): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636360.233:7436): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=41991 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636360.250:7437): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636360.250:7438): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636360.549:7439): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636360.549:7440): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636360.550:7441): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=42008 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636360.577:7442): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636360.577:7443): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636360.587:7444): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636360.591:7445): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636360.592:7446): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=42022 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636360.628:7447): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636360.628:7448): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636360.645:7449): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636360.645:7450): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636360.646:7451): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=42043 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636360.679:7452): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636360.679:7453): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636360.693:7454): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636360.693:7455): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636360.694:7456): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=42057 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636360.714:7457): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636360.714:7458): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636360.728:7459): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636360.728:7460): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636360.729:7461): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=42072 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636360.787:7462): pid=42087 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636360.787:7463): pid=42087 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D69677771747463726977686F7661777872797A706D63687372646D687264706F203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363336302E353739303731352D34323030352D343931383236353839373839312F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636360.787:7464): pid=42087 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636360.791:7465): pid=42087 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636360.999:7466): pid=42087 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636361.000:7467): pid=42087 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636361.002:7468): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636361.004:7469): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636361.018:7470): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636361.019:7471): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636361.020:7472): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=42092 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636361.044:7473): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636361.044:7474): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636361.447:7475): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636361.447:7476): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636361.448:7477): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=42109 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636361.474:7478): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636361.474:7479): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636361.488:7480): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636361.488:7481): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636361.490:7482): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=42123 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636361.514:7483): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636361.514:7484): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636361.532:7485): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636361.532:7486): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636361.533:7487): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=42144 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636361.575:7488): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636361.575:7489): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636361.590:7490): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636361.590:7491): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636361.592:7492): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=42158 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636361.615:7493): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636361.616:7494): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636361.627:7495): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636361.627:7496): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636361.629:7497): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=42173 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636361.688:7498): pid=42188 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636361.689:7499): pid=42188 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D736370736D66676973646774627261767063676F6163686977657372666D7768203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363336312E343735383335382D34323130372D3135353632323139303539333930322F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636361.689:7500): pid=42188 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636361.691:7501): pid=42188 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636361.856:7502): pid=42188 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636361.856:7503): pid=42188 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636361.859:7504): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636361.859:7505): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636361.870:7506): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636361.871:7507): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636361.872:7508): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=42192 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636361.898:7509): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636361.898:7510): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636362.220:7511): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636362.220:7512): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636362.222:7513): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=42211 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636362.249:7514): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636362.249:7515): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636362.257:7516): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636362.257:7517): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636362.261:7518): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=42225 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636362.288:7519): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636362.288:7520): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636362.307:7521): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636362.307:7522): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636362.308:7523): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=42246 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636362.357:7524): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636362.357:7525): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636362.376:7526): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636362.376:7527): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636362.377:7528): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=42260 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636362.401:7529): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636362.401:7530): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636362.414:7531): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636362.414:7532): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636362.415:7533): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=42275 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636362.470:7534): pid=42290 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636362.471:7535): pid=42290 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7865617474617565656463656F636A78686370637479716E61706D6574706477203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363336322E32343736392D34323230392D3138353938363831303138393936382F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636362.471:7536): pid=42290 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636362.474:7537): pid=42290 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636362.739:7538): pid=42290 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636362.739:7539): pid=42290 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636362.743:7540): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636362.743:7541): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636362.758:7542): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636362.758:7543): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636362.759:7544): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=42294 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636362.787:7545): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636362.787:7546): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=BPF msg=audit(1744636363.008:7547): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636363.008:7548): prog-id=0 op=UNLOAD type=USER_LOGIN msg=audit(1744636363.194:7549): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636363.194:7550): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636363.196:7551): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=42377 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636363.230:7552): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636363.230:7553): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=BPF msg=audit(1744636363.234:7554): prog-id=340 op=LOAD type=BPF msg=audit(1744636363.237:7555): prog-id=341 op=LOAD type=SYSCALL msg=audit(1744636363.237:7555): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00019bad0 a2=90 a3=0 items=0 ppid=42354 pid=42366 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636363.237:7555): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35386232616630646665343564323335663764633462333663 type=BPF msg=audit(1744636363.237:7556): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636363.237:7557): prog-id=342 op=LOAD type=SYSCALL msg=audit(1744636363.237:7557): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00019bc48 a2=90 a3=0 items=0 ppid=42354 pid=42366 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636363.237:7557): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35386232616630646665343564323335663764633462333663 type=BPF msg=audit(1744636363.237:7558): prog-id=343 op=LOAD type=SYSCALL msg=audit(1744636363.237:7558): arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=c00019b9d8 a2=90 a3=0 items=0 ppid=42354 pid=42366 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636363.237:7558): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35386232616630646665343564323335663764633462333663 type=BPF msg=audit(1744636363.237:7559): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636363.237:7560): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636363.237:7561): prog-id=344 op=LOAD type=SYSCALL msg=audit(1744636363.237:7561): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00019beb0 a2=90 a3=0 items=0 ppid=42354 pid=42366 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636363.237:7561): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35386232616630646665343564323335663764633462333663 type=USER_LOGIN msg=audit(1744636363.248:7562): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636363.249:7563): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636363.251:7564): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=42400 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636363.283:7565): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636363.283:7566): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636363.306:7567): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636363.306:7568): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636363.310:7569): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=42427 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636363.352:7570): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636363.354:7571): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636363.365:7572): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636363.365:7573): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636363.367:7574): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=42464 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636363.404:7575): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636363.404:7576): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636363.420:7577): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636363.420:7578): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636363.423:7579): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=42501 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636363.495:7580): pid=42516 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636363.495:7581): pid=42516 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D656C696171646F706B6D7776696A7A6D6A61686E7175766866746A7366747678203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363336332E323331383134342D34323330392D3133343432313337313430323334382F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636363.496:7582): pid=42516 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636363.499:7583): pid=42516 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636363.710:7584): pid=42516 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636363.710:7585): pid=42516 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636363.713:7586): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636363.713:7587): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636363.727:7588): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636363.727:7589): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636363.728:7590): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=42545 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636363.751:7591): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636363.751:7592): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636363.966:7593): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636363.966:7594): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636363.967:7595): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=42561 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636363.991:7596): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636363.991:7597): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636364.006:7598): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636364.006:7599): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636364.007:7600): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=42575 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636364.039:7601): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636364.039:7602): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636364.060:7603): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636364.060:7604): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636364.061:7605): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=42596 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636364.102:7606): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636364.102:7607): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636364.114:7608): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636364.114:7609): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636364.115:7610): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=42610 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636364.146:7611): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636364.146:7612): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636364.158:7613): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636364.158:7614): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636364.159:7615): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=42625 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636364.238:7616): pid=42641 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636364.238:7617): pid=42641 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6864786D726976677A6B61696A71656E626675686E6B6670626C65727A6F6968203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363336332E393933323736362D34323330392D3134393738363230383131373738392F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636364.239:7618): pid=42641 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636364.241:7619): pid=42641 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636364.426:7620): pid=42641 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636364.426:7621): pid=42641 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636364.432:7622): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636364.432:7623): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636364.443:7624): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636364.443:7625): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636364.447:7626): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=42645 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636364.479:7627): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636364.479:7628): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636364.684:7629): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636364.684:7630): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636364.685:7631): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=42660 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636364.726:7632): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636364.726:7633): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636364.736:7634): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636364.736:7635): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636364.738:7636): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=42674 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636364.788:7637): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636364.788:7638): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636364.801:7639): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636364.801:7640): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636364.802:7641): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=42695 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636364.850:7642): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636364.850:7643): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636364.861:7644): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636364.861:7645): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636364.862:7646): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=42709 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636364.885:7647): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636364.885:7648): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636364.897:7649): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636364.897:7650): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636364.898:7651): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=42724 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636364.953:7652): pid=42739 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636364.953:7653): pid=42739 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D776A77636B7864657770626D7167706261706A6E7A6C6C68757A6F7974786265203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363336342E373234313832342D34323330392D34373430323731353732353735362F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636364.954:7654): pid=42739 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636364.955:7655): pid=42739 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636365.132:7656): pid=42739 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636365.132:7657): pid=42739 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636365.135:7658): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636365.135:7659): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636365.147:7660): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636365.147:7661): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636365.148:7662): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=42743 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636365.174:7663): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636365.174:7664): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636365.379:7665): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636365.379:7666): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636365.380:7667): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=42758 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636365.400:7668): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636365.400:7669): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636365.410:7670): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636365.411:7671): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636365.411:7672): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=42772 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636365.434:7673): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636365.434:7674): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636365.449:7675): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636365.449:7676): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636365.450:7677): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=42793 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636365.486:7678): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636365.486:7679): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636365.502:7680): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636365.502:7681): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636365.503:7682): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=42807 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636365.524:7683): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636365.524:7684): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636365.535:7685): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636365.535:7686): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636365.536:7687): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=42822 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636365.593:7688): pid=42837 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636365.593:7689): pid=42837 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D646179706C6261717063796270646A76636A6B6565746D71696D736D6F7A786D203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363336352E343032313935352D34323330392D3230373636303530343835383738302F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636365.594:7690): pid=42837 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636365.595:7691): pid=42837 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636365.840:7692): pid=42837 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636365.840:7693): pid=42837 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636365.843:7694): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636365.843:7695): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636365.855:7696): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636365.855:7697): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636365.856:7698): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=42841 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636365.878:7699): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636365.878:7700): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636366.093:7701): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636366.093:7702): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636366.094:7703): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=42856 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636366.124:7704): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636366.124:7705): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636366.130:7706): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636366.130:7707): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636366.131:7708): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=42870 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636366.171:7709): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636366.171:7710): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636366.192:7711): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636366.192:7712): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636366.194:7713): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=42891 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636366.252:7714): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636366.252:7715): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636366.266:7716): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636366.266:7717): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636366.267:7718): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=42905 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636366.297:7719): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636366.297:7720): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636366.308:7721): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636366.308:7722): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636366.310:7723): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=42920 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636366.393:7724): pid=42935 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636366.393:7725): pid=42935 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D77616D6D736D7261716D6764706A72756B75617661786665696968656B6D786C203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363336362E313231393637362D34323330392D3132393537383134373034363537382F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636366.393:7726): pid=42935 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636366.396:7727): pid=42935 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636366.583:7728): pid=42935 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636366.584:7729): pid=42935 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636366.586:7730): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636366.586:7731): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636366.597:7732): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636366.597:7733): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636366.599:7734): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=42943 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636366.634:7735): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636366.634:7736): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636366.904:7737): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636366.904:7738): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636366.905:7739): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=42961 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636366.928:7740): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636366.928:7741): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636366.937:7742): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636366.937:7743): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636366.941:7744): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=42975 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636366.967:7745): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636366.967:7746): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636366.983:7747): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636366.983:7748): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636366.986:7749): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=42996 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636367.032:7750): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636367.032:7751): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636367.046:7752): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636367.046:7753): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636367.048:7754): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=43012 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636367.076:7755): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636367.076:7756): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636367.088:7757): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636367.088:7758): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636367.090:7759): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=43027 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636367.167:7760): pid=43042 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636367.167:7761): pid=43042 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6576616D616271746F6B7068727473676A6C74676664656D627863637A777265203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363336362E393238323336372D34323330392D3230373632333838363632363135352F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636367.168:7762): pid=43042 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636367.172:7763): pid=43042 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636367.372:7764): pid=43042 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636367.372:7765): pid=43042 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636367.375:7766): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636367.375:7767): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636367.388:7768): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636367.388:7769): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636367.392:7770): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=43048 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636367.414:7771): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636367.414:7772): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636367.635:7773): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636367.636:7774): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636367.637:7775): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=43063 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636367.656:7776): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636367.656:7777): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636367.667:7778): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636367.668:7779): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636367.669:7780): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=43077 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636367.698:7781): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636367.698:7782): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636367.714:7783): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636367.714:7784): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636367.715:7785): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=43098 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636367.747:7786): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636367.747:7787): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636367.758:7788): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636367.758:7789): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636367.759:7790): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=43112 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636367.790:7791): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636367.790:7792): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636367.797:7793): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636367.797:7794): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636367.798:7795): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=43127 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636367.861:7796): pid=43142 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636367.861:7797): pid=43142 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D637274636A7968696762626C757462786E666E627074686467796B6374757570203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363336372E363537373336332D34323330392D37333338383333323836323438312F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636367.861:7798): pid=43142 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636367.867:7799): pid=43142 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636368.047:7800): pid=43142 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636368.047:7801): pid=43142 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636368.050:7802): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636368.050:7803): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636368.063:7804): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636368.063:7805): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636368.068:7806): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=43146 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636368.097:7807): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636368.097:7808): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636368.341:7809): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636368.341:7810): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636368.343:7811): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=43161 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636368.371:7812): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636368.371:7813): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636368.384:7814): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636368.384:7815): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636368.385:7816): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=43175 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636368.428:7817): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636368.428:7818): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636368.448:7819): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636368.448:7820): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636368.452:7821): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=43196 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636368.485:7822): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636368.485:7823): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636368.497:7824): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636368.497:7825): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636368.498:7826): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=43210 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636368.520:7827): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636368.520:7828): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636368.533:7829): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636368.533:7830): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636368.535:7831): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=43225 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636368.585:7832): pid=43240 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636368.586:7833): pid=43240 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D706C6573776569636E6E646F7879776D706C6B62776471776D796B7570756B6B203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363336382E333733333037352D34323330392D32363033393934373135393937382F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636368.586:7834): pid=43240 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636368.588:7835): pid=43240 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636368.775:7836): pid=43240 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636368.775:7837): pid=43240 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636368.784:7838): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636368.784:7839): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636368.797:7840): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636368.797:7841): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636368.798:7842): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=43244 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636368.820:7843): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636368.820:7844): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636369.035:7845): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636369.036:7846): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636369.042:7847): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=43259 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636369.060:7848): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636369.061:7849): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636369.072:7850): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636369.072:7851): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636369.074:7852): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=43273 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636369.103:7853): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636369.103:7854): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636369.118:7855): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636369.118:7856): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636369.119:7857): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=43294 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636369.160:7858): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636369.160:7859): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636369.172:7860): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636369.172:7861): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636369.176:7862): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=43308 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636369.197:7863): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636369.197:7864): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636369.208:7865): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636369.208:7866): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636369.211:7867): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=43323 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636369.277:7868): pid=43338 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636369.277:7869): pid=43338 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C73677A6F627777677A706663767571747963666E65726D6E6B6A6263657077203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363336392E3036323331382D34323330392D3138353937303336343037393635382F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636369.277:7870): pid=43338 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636369.279:7871): pid=43338 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636369.498:7872): pid=43338 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636369.498:7873): pid=43338 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636369.501:7874): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636369.501:7875): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636369.512:7876): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636369.512:7877): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636369.514:7878): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=43342 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636369.542:7879): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636369.542:7880): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636369.761:7881): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636369.764:7882): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636369.765:7883): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=43362 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636369.791:7884): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636369.791:7885): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636369.803:7886): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636369.804:7887): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636369.805:7888): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=43376 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636369.836:7889): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636369.836:7890): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636369.854:7891): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636369.854:7892): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636369.855:7893): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=43397 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636369.894:7894): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636369.894:7895): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636369.910:7896): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636369.910:7897): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636369.911:7898): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=43411 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636369.939:7899): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636369.939:7900): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636369.951:7901): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636369.951:7902): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636369.953:7903): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=43428 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636370.015:7904): pid=43443 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636370.015:7905): pid=43443 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D687467627361616B7379796765637871716464757576637779657A686D716F64203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363336392E373933383832312D34323330392D35333838363431353035393136322F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636370.016:7906): pid=43443 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636370.026:7907): pid=43443 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636370.229:7908): pid=43443 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636370.230:7909): pid=43443 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636370.236:7910): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636370.237:7911): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636370.247:7912): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636370.247:7913): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636370.248:7914): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=43451 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636370.275:7915): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636370.275:7916): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636370.490:7917): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636370.490:7918): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636370.492:7919): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=43467 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636370.524:7920): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636370.524:7921): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636370.539:7922): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636370.539:7923): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636370.540:7924): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=43481 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636370.593:7925): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636370.593:7926): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636370.612:7927): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636370.612:7928): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636370.613:7929): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=43504 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636370.657:7930): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636370.658:7931): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636370.670:7932): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636370.670:7933): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636370.671:7934): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=43518 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636370.704:7935): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636370.704:7936): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636370.716:7937): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636370.717:7938): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636370.719:7939): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=43533 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636370.779:7940): pid=43548 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636370.779:7941): pid=43548 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D626D757A666A726D737175796F6B717A706B6B6B767261796D6C6B756C6A7862203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363337302E353236323738332D34323330392D3131393536313531363838323934302F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636370.780:7942): pid=43548 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636370.785:7943): pid=43548 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636370.976:7944): pid=43548 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636370.976:7945): pid=43548 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636370.978:7946): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636370.978:7947): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636370.991:7948): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636370.991:7949): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636370.992:7950): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=43556 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636371.029:7951): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636371.029:7952): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636371.296:7953): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636371.296:7954): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636371.298:7955): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=43574 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636371.317:7956): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636371.317:7957): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636371.331:7958): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636371.331:7959): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636371.331:7960): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=43588 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636371.359:7961): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636371.359:7962): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636371.379:7963): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636371.379:7964): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636371.380:7965): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=43609 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636371.414:7966): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636371.414:7967): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636371.427:7968): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636371.427:7969): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636371.428:7970): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=43623 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636371.453:7971): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636371.453:7972): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636371.465:7973): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636371.465:7974): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636371.465:7975): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=43638 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636371.524:7976): pid=43653 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636371.525:7977): pid=43653 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D726D65616569786D6775656D6F65746C6C7A6F70767061627A6D7A616E6B6B77203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363337312E3332303533382D34323330392D323530343531363538343438372F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636371.525:7978): pid=43653 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636371.527:7979): pid=43653 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636371.775:7980): pid=43653 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636371.775:7981): pid=43653 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636371.778:7982): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636371.778:7983): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636371.789:7984): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636371.789:7985): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636371.790:7986): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=43657 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636371.809:7987): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636371.809:7988): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636372.012:7989): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636372.012:7990): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636372.014:7991): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=43672 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636372.039:7992): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636372.039:7993): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636372.051:7994): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636372.051:7995): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636372.052:7996): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=43686 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636372.080:7997): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636372.080:7998): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636372.098:7999): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636372.099:8000): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636372.100:8001): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=43707 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636372.132:8002): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636372.132:8003): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636372.144:8004): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636372.144:8005): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636372.145:8006): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=43721 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636372.165:8007): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636372.165:8008): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636372.178:8009): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636372.178:8010): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636372.179:8011): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=43736 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636372.239:8012): pid=43751 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636372.239:8013): pid=43751 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D696F77636B716E646A6776627964637266787A7A6778636A6A6F687766647A203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363337322E3034323631362D34323330392D34313334343636313534363537302F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636372.239:8014): pid=43751 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636372.243:8015): pid=43751 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636372.445:8016): pid=43751 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636372.446:8017): pid=43751 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636372.449:8018): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636372.449:8019): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636372.460:8020): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636372.460:8021): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636372.461:8022): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=43755 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636372.481:8023): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636372.481:8024): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636372.671:8025): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636372.671:8026): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636372.672:8027): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=43770 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636372.698:8028): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636372.698:8029): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636372.711:8030): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636372.711:8031): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636372.712:8032): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=43784 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636372.735:8033): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636372.735:8034): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636372.797:8035): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636372.797:8036): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636372.798:8037): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=43805 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636372.830:8038): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636372.830:8039): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636372.842:8040): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636372.842:8041): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636372.843:8042): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=43819 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636372.863:8043): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636372.863:8044): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636372.875:8045): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636372.875:8046): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636372.876:8047): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=43834 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636372.940:8048): pid=43849 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636372.940:8049): pid=43849 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F7A616F7361737364696776786B66706968647779787769666E786C69687464203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363337322E3730313139392D34323330392D3230383330303732343434303037342F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636372.940:8050): pid=43849 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636372.942:8051): pid=43849 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636373.113:8052): pid=43849 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636373.113:8053): pid=43849 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636373.116:8054): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636373.116:8055): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636373.128:8056): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636373.128:8057): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636373.129:8058): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=43853 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636373.149:8059): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636373.149:8060): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636373.410:8061): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636373.410:8062): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636373.411:8063): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=43868 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636373.430:8064): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636373.430:8065): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636373.443:8066): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636373.443:8067): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636373.444:8068): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=43882 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636373.477:8069): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636373.477:8070): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636373.496:8071): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636373.496:8072): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636373.497:8073): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=43903 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636373.533:8074): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636373.533:8075): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636373.550:8076): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636373.550:8077): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636373.553:8078): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=43917 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636373.588:8079): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636373.588:8080): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636373.602:8081): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636373.602:8082): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636373.604:8083): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=43932 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636373.680:8084): pid=43947 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636373.681:8085): pid=43947 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B6C716C6F7068656976737A6C617471616168786F68717376656F71666A6978203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363337332E343333323336362D34323330392D3134333438353237303738353432332F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636373.682:8086): pid=43947 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636373.684:8087): pid=43947 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636374.100:8088): pid=43947 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636374.100:8089): pid=43947 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636374.103:8090): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636374.103:8091): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636374.117:8092): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636374.117:8093): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636374.118:8094): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=43951 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636374.141:8095): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636374.141:8096): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636374.445:8097): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636374.445:8098): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636374.447:8099): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=43967 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636374.472:8100): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636374.473:8101): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636374.484:8102): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636374.484:8103): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636374.485:8104): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=43981 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636374.511:8105): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636374.511:8106): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636374.528:8107): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636374.528:8108): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636374.529:8109): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=44002 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636374.566:8110): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636374.566:8111): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636374.581:8112): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636374.581:8113): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636374.582:8114): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=44016 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636374.605:8115): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636374.606:8116): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636374.619:8117): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636374.619:8118): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636374.620:8119): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=44031 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636374.692:8120): pid=44046 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636374.692:8121): pid=44046 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D72637176637865637A6B787171717471636F766E6572626E75656775756E6863203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363337342E343735363138312D34323330392D3132373836353731373431343730362F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636374.693:8122): pid=44046 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636374.695:8123): pid=44046 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636374.888:8124): pid=44046 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636374.888:8125): pid=44046 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636374.890:8126): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636374.890:8127): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636374.903:8128): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636374.903:8129): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636374.905:8130): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=44050 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636374.930:8131): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636374.930:8132): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636375.163:8133): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636375.163:8134): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636375.167:8135): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=44083 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636375.191:8136): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636375.191:8137): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636375.202:8138): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636375.202:8139): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636375.204:8140): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=44108 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636375.229:8141): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636375.229:8142): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636375.245:8143): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636375.245:8144): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636375.247:8145): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=44131 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636375.288:8146): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636375.288:8147): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636375.300:8148): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636375.301:8149): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636375.304:8150): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=44145 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636375.333:8151): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636375.333:8152): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636375.345:8153): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636375.345:8154): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636375.348:8155): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=44160 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636375.413:8156): pid=44175 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636375.414:8157): pid=44175 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D766A706F6265686368677A666C6A786172696361786E79786F667974616D7061203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363337352E3139333735352D34323330392D3138363335313437323431343536342F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636375.414:8158): pid=44175 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636375.416:8159): pid=44175 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636375.596:8160): pid=44175 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636375.596:8161): pid=44175 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636375.598:8162): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636375.599:8163): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636375.610:8164): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636375.610:8165): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636375.611:8166): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=44179 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636375.643:8167): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636375.643:8168): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636375.898:8169): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636375.899:8170): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636375.900:8171): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=44194 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636375.933:8172): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636375.933:8173): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636375.944:8174): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636375.944:8175): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636375.945:8176): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=44208 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636375.971:8177): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636375.971:8178): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636375.987:8179): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636375.987:8180): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636375.988:8181): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=44229 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636376.026:8182): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636376.026:8183): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636376.038:8184): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636376.038:8185): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636376.039:8186): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=44243 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636376.071:8187): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636376.071:8188): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636376.082:8189): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636376.082:8190): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636376.083:8191): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=44258 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636376.142:8192): pid=44273 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636376.142:8193): pid=44273 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B6466707561706E676B6F617A7363757A626C6970757077716A66666673796A203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363337352E393334393737332D34323330392D3135323437303335363439313638392F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636376.143:8194): pid=44273 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636376.144:8195): pid=44273 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636376.324:8196): pid=44273 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636376.324:8197): pid=44273 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636376.326:8198): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636376.327:8199): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636376.338:8200): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636376.338:8201): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636376.339:8202): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=44277 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636376.365:8203): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636376.365:8204): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636376.580:8205): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636376.580:8206): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636376.581:8207): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=44292 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636376.601:8208): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636376.601:8209): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636376.611:8210): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636376.611:8211): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636376.612:8212): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=44306 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636376.651:8213): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636376.651:8214): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636376.665:8215): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636376.665:8216): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636376.666:8217): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=44327 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636376.696:8218): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636376.696:8219): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636376.708:8220): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636376.708:8221): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636376.710:8222): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=44341 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636376.739:8223): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636376.739:8224): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636376.750:8225): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636376.750:8226): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636376.751:8227): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=44356 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636376.811:8228): pid=44371 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636376.811:8229): pid=44371 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B6C6665697A66796B73746A666B71756A69696C6E74686B656F796676656173203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363337362E363034303839352D34323330392D32383237383333323830313433362F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636376.812:8230): pid=44371 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636376.819:8231): pid=44371 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636376.983:8232): pid=44371 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636376.983:8233): pid=44371 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636376.991:8234): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636376.991:8235): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636377.003:8236): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636377.003:8237): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636377.005:8238): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=44375 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636377.036:8239): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636377.036:8240): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636377.273:8241): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636377.273:8242): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636377.274:8243): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=44392 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636377.294:8244): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636377.294:8245): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636377.306:8246): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636377.306:8247): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636377.307:8248): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=44406 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636377.336:8249): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636377.336:8250): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636377.352:8251): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636377.353:8252): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636377.355:8253): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=44427 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636377.398:8254): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636377.398:8255): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636377.410:8256): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636377.410:8257): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636377.411:8258): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=44441 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636377.438:8259): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636377.438:8260): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636377.451:8261): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636377.451:8262): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636377.452:8263): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=44456 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636377.521:8264): pid=44471 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636377.521:8265): pid=44471 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D646D616E73667467766170676D69616E65766E6A6C6E676F6F6F706B6E756969203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363337372E323937363331352D34323330392D3232353534363238373936353630362F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636377.522:8266): pid=44471 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636377.524:8267): pid=44471 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636377.690:8268): pid=44471 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636377.690:8269): pid=44471 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636377.693:8270): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636377.693:8271): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636377.707:8272): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636377.707:8273): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636377.708:8274): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=44475 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636377.735:8275): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636377.735:8276): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636377.933:8277): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636377.933:8278): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636377.935:8279): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=44490 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636377.955:8280): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636377.955:8281): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636377.966:8282): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636377.966:8283): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636377.967:8284): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=44504 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636377.993:8285): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636377.993:8286): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636378.012:8287): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636378.012:8288): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636378.013:8289): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=44525 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636378.051:8290): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636378.051:8291): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636378.063:8292): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636378.063:8293): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636378.068:8294): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=44539 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636378.085:8295): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636378.085:8296): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636378.097:8297): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636378.097:8298): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636378.098:8299): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=44554 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636378.166:8300): pid=44569 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636378.166:8301): pid=44569 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E757265787A6276706470786F77796A6A7A627A6965657363616B7864707779203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363337372E3935373936322D34323330392D3231343039393839333830393137302F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636378.167:8302): pid=44569 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636378.168:8303): pid=44569 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636378.330:8304): pid=44569 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636378.330:8305): pid=44569 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636378.333:8306): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636378.333:8307): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636378.344:8308): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636378.344:8309): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636378.345:8310): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=44573 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636378.364:8311): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636378.365:8312): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636378.585:8313): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636378.585:8314): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636378.586:8315): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=44588 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636378.607:8316): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636378.607:8317): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636378.618:8318): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636378.618:8319): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636378.619:8320): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=44602 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636378.644:8321): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636378.645:8322): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636378.665:8323): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636378.665:8324): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636378.666:8325): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=44623 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636378.701:8326): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636378.703:8327): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636378.720:8328): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636378.720:8329): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636378.721:8330): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=44637 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636378.742:8331): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636378.742:8332): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636378.754:8333): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636378.754:8334): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636378.756:8335): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=44652 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636378.821:8336): pid=44667 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636378.821:8337): pid=44667 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D716972776574716C747770706D656569716868756D6172686F61756D616F7176203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363337382E363130363934342D34323330392D3230353930303136393235353737342F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636378.821:8338): pid=44667 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636378.823:8339): pid=44667 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636379.003:8340): pid=44667 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636379.003:8341): pid=44667 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636379.006:8342): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636379.006:8343): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636379.017:8344): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636379.017:8345): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636379.018:8346): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=44671 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636379.037:8347): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636379.038:8348): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636379.279:8349): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636379.279:8350): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636379.280:8351): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=44686 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636379.309:8352): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636379.309:8353): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636379.324:8354): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636379.324:8355): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636379.325:8356): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=44700 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636379.349:8357): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636379.349:8358): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636379.371:8359): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636379.371:8360): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636379.372:8361): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=44721 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636379.406:8362): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636379.406:8363): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636379.418:8364): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636379.418:8365): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636379.419:8366): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=44735 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636379.444:8367): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636379.444:8368): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636379.455:8369): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636379.455:8370): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636379.457:8371): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=44750 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636379.522:8372): pid=44765 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636379.523:8373): pid=44765 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D687574716777646875646E64797772786268667472716D637274616267736E72203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363337392E333131373235362D34323330392D363736333738303930353733342F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636379.523:8374): pid=44765 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636379.525:8375): pid=44765 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636379.695:8376): pid=44765 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636379.695:8377): pid=44765 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636379.698:8378): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636379.698:8379): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636379.708:8380): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636379.709:8381): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636379.710:8382): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=44769 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636379.730:8383): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636379.730:8384): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636379.969:8385): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636379.969:8386): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636379.970:8387): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=44784 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636379.991:8388): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636379.991:8389): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636380.003:8390): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636380.003:8391): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636380.004:8392): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=44798 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636380.034:8393): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636380.034:8394): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636380.051:8395): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636380.051:8396): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636380.053:8397): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=44819 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636380.097:8398): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636380.097:8399): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636380.109:8400): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636380.109:8401): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636380.111:8402): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=44833 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636380.136:8403): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636380.137:8404): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636380.147:8405): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636380.147:8406): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636380.148:8407): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=44848 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636380.206:8408): pid=44863 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636380.206:8409): pid=44863 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D676B69626D70616D6461727061656B7771636A6B6C706771626D75727A70686D203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363337392E393934373734332D34323330392D34303736393730383730303830352F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636380.206:8410): pid=44863 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636380.210:8411): pid=44863 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636380.408:8412): pid=44863 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636380.408:8413): pid=44863 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636380.411:8414): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636380.411:8415): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636380.422:8416): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636380.422:8417): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636380.423:8418): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=44867 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636380.450:8419): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636380.450:8420): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636380.680:8421): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636380.680:8422): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636380.681:8423): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=44882 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636380.703:8424): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636380.703:8425): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636380.714:8426): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636380.714:8427): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636380.715:8428): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=44896 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636380.742:8429): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636380.742:8430): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636380.758:8431): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636380.758:8432): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636380.762:8433): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=44917 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636380.799:8434): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636380.799:8435): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636380.812:8436): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636380.812:8437): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636380.814:8438): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=44931 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636380.833:8439): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636380.833:8440): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636380.845:8441): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636380.845:8442): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636380.846:8443): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=44946 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636380.906:8444): pid=44961 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636380.907:8445): pid=44961 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6161696C6971796272746961647378717062767275717563746461616D706F62203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363338302E373036333439362D34323330392D3130383537373733353639373533332F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636380.907:8446): pid=44961 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636380.908:8447): pid=44961 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636381.098:8448): pid=44961 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636381.098:8449): pid=44961 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636381.100:8450): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636381.100:8451): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636381.111:8452): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636381.111:8453): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636381.113:8454): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=44965 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636381.134:8455): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636381.135:8456): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636381.356:8457): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636381.356:8458): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636381.357:8459): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=44980 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636381.379:8460): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636381.379:8461): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636381.390:8462): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636381.390:8463): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636381.391:8464): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=44994 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636381.419:8465): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636381.419:8466): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636381.434:8467): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636381.435:8468): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636381.436:8469): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=45015 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636381.473:8470): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636381.474:8471): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636381.488:8472): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636381.488:8473): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636381.489:8474): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=45029 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636381.516:8475): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636381.516:8476): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636381.530:8477): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636381.531:8478): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636381.532:8479): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=45044 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636381.595:8480): pid=45059 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636381.595:8481): pid=45059 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D636166676666626772796D7167686171646A6C6663757A73616C7061657A7169203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363338312E333832303934312D34323330392D3131323933313537363531323130322F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636381.596:8482): pid=45059 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636381.598:8483): pid=45059 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636381.824:8484): pid=45059 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636381.825:8485): pid=45059 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636381.827:8486): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636381.828:8487): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636381.839:8488): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636381.840:8489): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636381.841:8490): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=45063 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636381.859:8491): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636381.860:8492): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636382.064:8493): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636382.064:8494): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636382.065:8495): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=45078 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636382.090:8496): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636382.091:8497): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636382.103:8498): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636382.103:8499): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636382.105:8500): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=45092 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636382.133:8501): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636382.133:8502): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636382.151:8503): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636382.151:8504): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636382.153:8505): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=45113 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636382.202:8506): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636382.202:8507): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636382.217:8508): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636382.217:8509): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636382.218:8510): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=45127 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636382.241:8511): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636382.241:8512): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636382.255:8513): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636382.255:8514): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636382.257:8515): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=45142 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636382.320:8516): pid=45157 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636382.320:8517): pid=45157 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D616E666C707372726864696867617070636F7A72656275756377716879626178203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363338322E303933353034322D34323330392D3234333537393639313738353338302F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636382.321:8518): pid=45157 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636382.323:8519): pid=45157 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636382.511:8520): pid=45157 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636382.511:8521): pid=45157 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636382.513:8522): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636382.515:8523): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636382.527:8524): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636382.527:8525): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636382.528:8526): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=45163 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636382.551:8527): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636382.551:8528): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636382.771:8529): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636382.771:8530): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636382.772:8531): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=45178 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636382.793:8532): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636382.793:8533): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636382.806:8534): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636382.806:8535): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636382.808:8536): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=45192 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636382.836:8537): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636382.836:8538): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636382.852:8539): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636382.852:8540): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636382.854:8541): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=45213 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636382.903:8542): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636382.903:8543): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636382.916:8544): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636382.916:8545): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636382.918:8546): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=45227 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636382.948:8547): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636382.948:8548): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636382.962:8549): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636382.962:8550): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636382.963:8551): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=45242 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636383.019:8552): pid=45257 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636383.019:8553): pid=45257 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D636C666C737A637A6D6C706A6C6164707169676A7479616472746568786170203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363338322E373936343335362D34323330392D3238303439323238353139313338302F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636383.019:8554): pid=45257 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636383.021:8555): pid=45257 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636383.188:8556): pid=45257 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636383.188:8557): pid=45257 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636383.191:8558): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636383.191:8559): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636383.204:8560): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636383.204:8561): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636383.205:8562): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=45261 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636383.228:8563): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636383.228:8564): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636383.444:8565): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636383.444:8566): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636383.446:8567): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=45276 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636383.464:8568): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636383.464:8569): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636383.476:8570): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636383.476:8571): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636383.477:8572): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=45290 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636383.506:8573): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636383.506:8574): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636383.524:8575): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636383.524:8576): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636383.525:8577): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=45311 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636383.565:8578): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636383.565:8579): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636383.579:8580): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636383.579:8581): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636383.580:8582): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=45325 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636383.606:8583): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636383.606:8584): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636383.620:8585): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636383.620:8586): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636383.622:8587): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=45340 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636383.688:8588): pid=45355 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636383.688:8589): pid=45355 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D6374736A66616C626F6A706F7373797472797075767974636A6674766D7366203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363338332E343636383333382D34323330392D3235313432313939333136333831332F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636383.689:8590): pid=45355 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636383.690:8591): pid=45355 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636383.879:8592): pid=45355 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636383.880:8593): pid=45355 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636383.883:8594): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636383.883:8595): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636383.897:8596): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636383.897:8597): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636383.898:8598): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=45359 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636383.921:8599): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636383.921:8600): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636384.194:8601): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636384.194:8602): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636384.195:8603): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=45374 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636384.214:8604): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636384.214:8605): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636384.225:8606): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636384.225:8607): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636384.226:8608): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=45388 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636384.251:8609): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636384.251:8610): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636384.269:8611): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636384.269:8612): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636384.270:8613): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=45409 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636384.304:8614): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636384.304:8615): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636384.318:8616): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636384.318:8617): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636384.319:8618): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=45423 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636384.340:8619): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636384.340:8620): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636384.355:8621): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636384.355:8622): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636384.357:8623): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=45438 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636384.417:8624): pid=45453 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636384.417:8625): pid=45453 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7170616C717875777272796A6E6964716F776E787A64637A7A6373746472717A203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363338342E3231363733352D34323330392D38383336343133393831303034332F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636384.417:8626): pid=45453 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636384.420:8627): pid=45453 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636384.589:8628): pid=45453 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636384.589:8629): pid=45453 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636384.592:8630): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636384.592:8631): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636384.604:8632): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636384.604:8633): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636384.606:8634): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=45457 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636384.628:8635): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636384.628:8636): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636385.137:8637): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636385.137:8638): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636385.138:8639): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=45477 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636385.161:8640): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636385.161:8641): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636385.172:8642): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636385.172:8643): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636385.173:8644): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=45491 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636385.205:8645): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636385.205:8646): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636385.345:8647): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636385.345:8648): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636385.346:8649): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=45512 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636385.382:8650): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636385.382:8651): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636385.397:8652): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636385.398:8653): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636385.399:8654): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=45526 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636385.424:8655): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636385.424:8656): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636385.435:8657): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636385.435:8658): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636385.437:8659): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=45541 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636385.499:8660): pid=45556 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636385.499:8661): pid=45556 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D74726174796E6C6478666F6D66746B646B74797579646C6E6B677569737A6274203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363338352E313634333638392D34353437352D3133313235313435363635303633332F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636385.500:8662): pid=45556 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636385.502:8663): pid=45556 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636385.684:8664): pid=45556 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636385.684:8665): pid=45556 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636385.687:8666): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636385.687:8667): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636385.702:8668): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636385.702:8669): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636385.703:8670): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=45561 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636385.731:8671): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636385.731:8672): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636385.742:8673): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636385.742:8674): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636385.743:8675): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=45575 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636385.765:8676): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636385.765:8677): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636385.783:8678): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636385.784:8679): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636385.785:8680): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=45591 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636385.819:8681): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636385.819:8682): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636385.831:8683): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636385.832:8684): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636385.833:8685): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=45605 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636385.856:8686): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636385.856:8687): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636385.867:8688): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636385.867:8689): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636385.868:8690): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=45620 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636385.929:8691): pid=45635 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636385.930:8692): pid=45635 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D79786866626669797377767268796A67686861697172726E6B61677677616673203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363338352E313634333638392D34353437352D3133313235313435363635303633332F416E736962616C6C5A5F636F70792E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636385.930:8693): pid=45635 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636385.932:8694): pid=45635 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636386.112:8695): pid=45635 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636386.113:8696): pid=45635 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636386.115:8697): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636386.117:8698): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636386.129:8699): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636386.129:8700): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636386.130:8701): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=45639 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636386.151:8702): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636386.151:8703): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636386.443:8704): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636386.443:8705): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636386.444:8706): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=45656 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636386.466:8707): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636386.466:8708): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636386.476:8709): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636386.476:8710): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636386.477:8711): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=45670 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636386.500:8712): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636386.500:8713): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636386.519:8714): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636386.519:8715): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636386.520:8716): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=45691 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636386.563:8717): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636386.563:8718): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636386.576:8719): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636386.576:8720): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636386.577:8721): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=45705 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636386.597:8722): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636386.597:8723): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636386.610:8724): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636386.610:8725): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636386.612:8726): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=45720 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636386.711:8727): pid=45735 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636386.712:8728): pid=45735 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd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exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636386.712:8729): pid=45735 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636386.719:8730): pid=45735 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=BPF msg=audit(1744636387.383:8731): prog-id=345 op=LOAD type=SYSCALL msg=audit(1744636387.383:8731): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001a1c48 a2=90 a3=0 items=0 ppid=45771 pid=45783 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636387.383:8731): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37383162343565323534653761653734623133633536393831 type=BPF msg=audit(1744636387.383:8732): prog-id=346 op=LOAD type=SYSCALL msg=audit(1744636387.383:8732): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c0001a19d8 a2=90 a3=0 items=0 ppid=45771 pid=45783 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636387.383:8732): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37383162343565323534653761653734623133633536393831 type=BPF msg=audit(1744636387.384:8733): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636387.384:8734): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636387.384:8735): prog-id=347 op=LOAD type=SYSCALL msg=audit(1744636387.384:8735): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001a1eb0 a2=90 a3=0 items=0 ppid=45771 pid=45783 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636387.384:8735): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37383162343565323534653761653734623133633536393831 type=BPF msg=audit(1744636387.610:8736): prog-id=348 op=LOAD type=BPF msg=audit(1744636387.611:8737): prog-id=349 op=LOAD type=SYSCALL msg=audit(1744636387.611:8737): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000125ad0 a2=90 a3=0 items=0 ppid=45876 pid=45919 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636387.611:8737): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30376534323863613561363335313064616161356537613466 type=BPF msg=audit(1744636387.612:8738): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636387.612:8739): prog-id=350 op=LOAD type=SYSCALL msg=audit(1744636387.612:8739): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000125c48 a2=90 a3=0 items=0 ppid=45876 pid=45919 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636387.612:8739): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30376534323863613561363335313064616161356537613466 type=BPF msg=audit(1744636387.613:8740): prog-id=351 op=LOAD type=SYSCALL msg=audit(1744636387.613:8740): arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=c0001259d8 a2=90 a3=0 items=0 ppid=45876 pid=45919 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636387.613:8740): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30376534323863613561363335313064616161356537613466 type=BPF msg=audit(1744636387.613:8741): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636387.613:8742): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636387.613:8743): prog-id=352 op=LOAD type=SYSCALL msg=audit(1744636387.613:8743): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000125eb0 a2=90 a3=0 items=0 ppid=45876 pid=45919 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636387.613:8743): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30376534323863613561363335313064616161356537613466 type=BPF msg=audit(1744636387.631:8744): prog-id=353 op=LOAD type=BPF msg=audit(1744636387.633:8745): prog-id=354 op=LOAD type=SYSCALL msg=audit(1744636387.633:8745): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001b9ad0 a2=90 a3=0 items=0 ppid=45899 pid=45913 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636387.633:8745): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35636536623937646264643263386132313762383533363261 type=BPF msg=audit(1744636387.633:8746): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636387.633:8747): prog-id=355 op=LOAD type=SYSCALL msg=audit(1744636387.633:8747): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001b9c48 a2=90 a3=0 items=0 ppid=45899 pid=45913 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636387.633:8747): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35636536623937646264643263386132313762383533363261 type=BPF msg=audit(1744636387.634:8748): prog-id=356 op=LOAD type=SYSCALL msg=audit(1744636387.634:8748): arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=c0001b99d8 a2=90 a3=0 items=0 ppid=45899 pid=45913 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636387.634:8748): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35636536623937646264643263386132313762383533363261 type=BPF msg=audit(1744636387.634:8749): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636387.634:8750): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636387.634:8751): prog-id=357 op=LOAD type=SYSCALL msg=audit(1744636387.634:8751): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001b9eb0 a2=90 a3=0 items=0 ppid=45899 pid=45913 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636387.634:8751): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35636536623937646264643263386132313762383533363261 type=USER_END msg=audit(1744636387.792:8752): pid=45735 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636387.792:8753): pid=45735 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636387.795:8754): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636387.795:8755): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636387.807:8756): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636387.807:8757): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636387.808:8758): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=46173 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636387.833:8759): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636387.833:8760): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=BPF msg=audit(1744636388.239:8761): prog-id=0 op=UNLOAD type=USER_LOGIN msg=audit(1744636388.407:8762): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636388.407:8763): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636388.408:8764): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=46538 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636388.426:8765): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636388.426:8766): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636388.439:8767): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636388.439:8768): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636388.440:8769): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=46552 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636388.476:8770): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636388.476:8771): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636388.495:8772): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636388.495:8773): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636388.497:8774): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=46581 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636388.533:8775): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636388.533:8776): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636388.545:8777): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636388.545:8778): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636388.547:8779): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=46595 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636388.587:8780): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636388.587:8781): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636388.601:8782): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636388.601:8783): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636388.602:8784): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=46610 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636388.666:8785): pid=46625 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636388.667:8786): pid=46625 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D62677A6A726F6F66666C686A74707063626C6C65757665737A626E686D7A7461203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363338382E343239333336332D34363332362D3237333632333531383537303530322F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636388.667:8787): pid=46625 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636388.672:8788): pid=46625 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636389.065:8789): pid=46625 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636389.065:8790): pid=46625 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636389.068:8791): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636389.068:8792): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636389.080:8793): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636389.080:8794): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636389.083:8795): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=46737 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636389.114:8796): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636389.114:8797): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636389.449:8798): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636389.449:8799): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636389.450:8800): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=46759 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636389.474:8801): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636389.474:8802): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636389.488:8803): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636389.488:8804): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636389.490:8805): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=46773 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636389.518:8806): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636389.519:8807): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636389.533:8808): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636389.533:8809): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636389.534:8810): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=46794 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636389.568:8811): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636389.569:8812): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636389.580:8813): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636389.581:8814): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636389.581:8815): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=46816 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636389.608:8816): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636389.608:8817): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636389.620:8818): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636389.620:8819): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636389.621:8820): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=46831 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636389.695:8821): pid=46846 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636389.696:8822): pid=46846 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6462716878676464767A6B717A66646D647579796B74796F666F736467717569203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363338392E343736313837352D34363332362D3234383336353531343538353836362F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636389.696:8823): pid=46846 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636389.699:8824): pid=46846 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636390.043:8825): pid=46846 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636390.043:8826): pid=46846 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636390.045:8827): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636390.045:8828): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636390.056:8829): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636390.057:8830): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636390.058:8831): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=46947 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636390.083:8832): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636390.083:8833): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636390.342:8834): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636390.342:8835): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636390.345:8836): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=46978 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636390.370:8837): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636390.370:8838): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636390.381:8839): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636390.381:8840): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636390.383:8841): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=46992 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636390.427:8842): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636390.427:8843): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636390.443:8844): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636390.443:8845): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636390.444:8846): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=47013 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636390.493:8847): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636390.493:8848): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636390.504:8849): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636390.504:8850): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636390.505:8851): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=47027 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636390.524:8852): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636390.524:8853): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636390.537:8854): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636390.537:8855): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636390.539:8856): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=47042 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636390.589:8857): pid=47057 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636390.589:8858): pid=47057 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D72746E6D6C73757A6D75776575796C6F6578656570627673616A786269726474203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363339302E333732373139382D34363332362D323930353636383532333930382F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636390.589:8859): pid=47057 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636390.591:8860): pid=47057 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636402.198:8861): pid=47057 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636402.199:8862): pid=47057 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636402.202:8863): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636402.202:8864): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636402.214:8865): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636402.214:8866): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636402.216:8867): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=47246 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636402.236:8868): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636402.236:8869): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636402.480:8870): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636402.480:8871): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636402.481:8872): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=47261 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636402.500:8873): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636402.500:8874): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636402.511:8875): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636402.511:8876): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636402.514:8877): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=47275 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636402.538:8878): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636402.538:8879): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636402.554:8880): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636402.554:8881): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636402.555:8882): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=47296 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636402.588:8883): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636402.588:8884): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636402.601:8885): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636402.601:8886): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636402.602:8887): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=47310 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636402.620:8888): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636402.620:8889): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636402.634:8890): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636402.634:8891): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636402.635:8892): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=47325 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636402.690:8893): pid=47340 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636402.690:8894): pid=47340 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D707461646B7A696C626C6777646F7A77666D6D79726665676E666B6D7A6A6766203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363430322E353032313032392D34363332362D3135393333333839343335303736302F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636402.691:8895): pid=47340 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636402.693:8896): pid=47340 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636403.167:8897): pid=47340 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636403.167:8898): pid=47340 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636403.170:8899): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636403.171:8900): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636403.184:8901): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636403.184:8902): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636403.185:8903): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=47369 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636403.205:8904): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636403.205:8905): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636403.534:8906): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636403.534:8907): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636403.535:8908): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=47386 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636403.555:8909): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636403.555:8910): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636403.566:8911): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636403.566:8912): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636403.567:8913): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=47400 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636403.590:8914): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636403.590:8915): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636403.609:8916): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636403.609:8917): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636403.610:8918): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=47425 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636403.644:8919): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636403.644:8920): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636403.657:8921): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636403.657:8922): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636403.658:8923): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=47439 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636403.677:8924): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636403.677:8925): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636403.689:8926): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636403.689:8927): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636403.691:8928): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=47454 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636403.749:8929): pid=47469 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636403.750:8930): pid=47469 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D66796E77776474696468626E616D756A6A62647A6770707764726C666765656C203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363430332E353537353737362D34363332362D37353139303834323638333332352F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636403.750:8931): pid=47469 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636403.752:8932): pid=47469 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636404.260:8933): pid=47469 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636404.260:8934): pid=47469 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636404.263:8935): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636404.263:8936): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636404.277:8937): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636404.277:8938): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636404.280:8939): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=47494 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636404.299:8940): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636404.299:8941): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636404.545:8942): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636404.545:8943): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636404.547:8944): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=47513 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636404.576:8945): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636404.576:8946): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636404.586:8947): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636404.586:8948): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636404.588:8949): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=47527 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636404.611:8950): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636404.612:8951): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636404.628:8952): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636404.628:8953): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636404.630:8954): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=47548 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636404.667:8955): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636404.667:8956): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636404.682:8957): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636404.682:8958): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636404.683:8959): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=47562 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636404.706:8960): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636404.707:8961): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636404.723:8962): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636404.724:8963): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636404.725:8964): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=47577 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636404.778:8965): pid=47592 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636404.778:8966): pid=47592 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6164736D62676D74766D7579726E73696369687A7969706C69786F6578656872203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363430342E353736393031342D34363332362D3132363931393535373132313435322F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636404.779:8967): pid=47592 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636404.780:8968): pid=47592 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636405.104:8969): pid=47592 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636405.104:8970): pid=47592 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636405.108:8971): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636405.108:8972): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636405.123:8973): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636405.123:8974): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636405.125:8975): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=47610 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636405.150:8976): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636405.150:8977): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636405.427:8978): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636405.427:8979): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636405.428:8980): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=47632 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636405.449:8981): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636405.450:8982): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636405.461:8983): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636405.461:8984): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636405.462:8985): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=47646 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636405.493:8986): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636405.493:8987): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636405.519:8988): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636405.519:8989): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636405.521:8990): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=47667 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636405.566:8991): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636405.566:8992): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636405.584:8993): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636405.584:8994): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636405.586:8995): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=47681 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636405.616:8996): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636405.616:8997): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636405.628:8998): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636405.628:8999): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636405.630:9000): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=47696 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636405.686:9001): pid=47711 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636405.687:9002): pid=47711 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C64616B6E6C61686E616767766673666D6C706D716F787370766871626C6474203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363430352E343530382D34373632342D3234303134393434303730353531392F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636405.687:9003): pid=47711 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636405.690:9004): pid=47711 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636405.931:9005): pid=47711 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636405.932:9006): pid=47711 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636405.935:9007): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636405.935:9008): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636405.947:9009): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636405.947:9010): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636405.949:9011): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=47721 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636405.967:9012): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636405.967:9013): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636406.243:9014): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636406.243:9015): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636406.245:9016): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=47738 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636406.272:9017): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636406.272:9018): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636406.284:9019): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636406.284:9020): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636406.285:9021): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=47752 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636406.311:9022): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636406.311:9023): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636406.331:9024): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636406.331:9025): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636406.333:9026): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=47773 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636406.366:9027): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636406.366:9028): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636406.380:9029): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636406.380:9030): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636406.381:9031): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=47789 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636406.402:9032): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636406.402:9033): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636406.415:9034): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636406.415:9035): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636406.416:9036): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=47804 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636406.513:9037): pid=47823 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636406.513:9038): pid=47823 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7265776A77786A6A736C6E617061696666656A6A73636C6F6F797970716F6475203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363430362E323734343730362D34373733362D39303832333831323533383031352F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636406.514:9039): pid=47823 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636406.516:9040): pid=47823 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636406.681:9041): pid=47823 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636406.681:9042): pid=47823 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636406.684:9043): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636406.685:9044): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636406.695:9045): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636406.695:9046): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636406.696:9047): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=47834 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636406.715:9048): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636406.715:9049): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636406.990:9050): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636406.990:9051): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636406.991:9052): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=47853 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636407.019:9053): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636407.019:9054): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636407.031:9055): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636407.031:9056): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636407.032:9057): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=47867 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636407.069:9058): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636407.069:9059): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636407.087:9060): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636407.087:9061): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636407.090:9062): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=47890 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636407.129:9063): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636407.129:9064): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636407.142:9065): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636407.142:9066): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636407.146:9067): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=47904 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636407.163:9068): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636407.163:9069): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636407.175:9070): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636407.175:9071): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636407.176:9072): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=47919 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636407.228:9073): pid=47934 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636407.229:9074): pid=47934 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D687071726E6E6E696C69686A6372786E6F786B6965767A6A6969627879646C7A203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363430372E3032313231362D34373835312D3132333535313233393733393131332F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636407.229:9075): pid=47934 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636407.231:9076): pid=47934 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636407.428:9077): pid=47934 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636407.428:9078): pid=47934 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636407.431:9079): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636407.433:9080): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636407.445:9081): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636407.445:9082): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636407.446:9083): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=47944 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636407.467:9084): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636407.467:9085): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636408.099:9086): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636408.099:9087): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636408.100:9088): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=47983 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636408.120:9089): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636408.120:9090): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636408.133:9091): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636408.133:9092): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636408.134:9093): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=47997 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636408.160:9094): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636408.160:9095): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636408.177:9096): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636408.177:9097): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636408.178:9098): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=48018 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636408.211:9099): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636408.211:9100): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636408.224:9101): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636408.225:9102): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636408.226:9103): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=48032 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636408.246:9104): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636408.246:9105): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636408.259:9106): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636408.259:9107): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636408.261:9108): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=48047 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636408.335:9109): pid=48062 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636408.335:9110): pid=48062 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D69726E786A6968747A7764796A7475776770666C766A74646A6C7A657971716B203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363430382E313232383137352D34373937352D3130353238343336373133343939362F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636408.336:9111): pid=48062 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636408.338:9112): pid=48062 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636408.612:9113): pid=48062 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636408.613:9114): pid=48062 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636408.618:9115): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636408.619:9116): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636408.636:9117): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636408.636:9118): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636408.638:9119): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=48066 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636408.666:9120): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636408.666:9121): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636408.940:9122): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636408.940:9123): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636408.941:9124): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=48094 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636408.963:9125): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636408.963:9126): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636408.976:9127): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636408.976:9128): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636408.977:9129): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=48108 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636409.003:9130): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636409.003:9131): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636409.021:9132): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636409.021:9133): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636409.024:9134): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=48129 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636409.057:9135): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636409.057:9136): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636409.068:9137): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636409.068:9138): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636409.069:9139): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=48143 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636409.094:9140): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636409.094:9141): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636409.107:9142): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636409.107:9143): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636409.108:9144): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=48158 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636409.160:9145): pid=48173 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636409.160:9146): pid=48173 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D62796A62666462697376666862647772636179686F63706668676C636A6E6264203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363430382E393635363739362D34373937352D3235363634323432323735363939312F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636409.161:9147): pid=48173 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636409.162:9148): pid=48173 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636409.330:9149): pid=48173 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636409.330:9150): pid=48173 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636409.333:9151): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636409.333:9152): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636409.347:9153): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636409.347:9154): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636409.348:9155): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=48177 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636409.366:9156): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636409.367:9157): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636409.564:9158): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636409.564:9159): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636409.567:9160): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=48192 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636409.588:9161): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636409.588:9162): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636409.599:9163): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636409.599:9164): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636409.604:9165): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=48206 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636409.632:9166): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636409.632:9167): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636409.650:9168): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636409.651:9169): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636409.653:9170): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=48229 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636409.688:9171): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636409.688:9172): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636409.701:9173): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636409.702:9174): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636409.703:9175): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=48247 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636409.725:9176): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636409.725:9177): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636409.738:9178): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636409.738:9179): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636409.739:9180): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=48262 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636409.794:9181): pid=48277 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636409.794:9182): pid=48277 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D786162726F786A63626F616474797A657A766B6867746D62626B68626D717363203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363430392E353839343235332D34373937352D3233363535393339333335393437322F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636409.795:9183): pid=48277 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636409.796:9184): pid=48277 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636409.977:9185): pid=48277 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636409.977:9186): pid=48277 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636409.980:9187): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636409.981:9188): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636409.994:9189): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636409.994:9190): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636409.995:9191): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=48281 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636410.020:9192): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636410.020:9193): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636410.224:9194): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636410.225:9195): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636410.226:9196): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=48302 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636410.248:9197): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636410.248:9198): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636410.258:9199): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636410.258:9200): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636410.259:9201): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=48316 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636410.284:9202): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636410.284:9203): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636410.299:9204): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636410.299:9205): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636410.300:9206): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=48337 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636410.335:9207): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636410.335:9208): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636410.348:9209): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636410.348:9210): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636410.349:9211): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=48351 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636410.370:9212): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636410.370:9213): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636410.382:9214): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636410.382:9215): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636410.384:9216): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=48368 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636410.435:9217): pid=48383 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636410.435:9218): pid=48383 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7062646565656F6C6269626B67707861696A74746677647476767771656B646A203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363431302E323438393731372D34373937352D3130323831353134333139383135352F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636410.435:9219): pid=48383 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636410.437:9220): pid=48383 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636410.604:9221): pid=48383 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636410.604:9222): pid=48383 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636410.607:9223): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636410.608:9224): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636410.619:9225): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636410.619:9226): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636410.620:9227): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=48391 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636410.639:9228): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636410.640:9229): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636410.860:9230): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636410.860:9231): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636410.861:9232): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=48406 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636410.881:9233): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636410.881:9234): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636410.891:9235): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636410.891:9236): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636410.892:9237): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=48420 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636410.912:9238): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636410.912:9239): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636410.928:9240): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636410.928:9241): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636410.929:9242): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=48441 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636410.958:9243): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636410.958:9244): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636410.970:9245): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636410.970:9246): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636410.972:9247): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=48455 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636410.994:9248): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636410.994:9249): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636411.008:9250): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636411.008:9251): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636411.010:9252): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=48470 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636411.059:9253): pid=48485 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636411.059:9254): pid=48485 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E727865786F707A786B6F787076706F78666D707A6762626373666969686B6D203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363431302E383832303734362D34373937352D36373134393439363538333435332F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636411.060:9255): pid=48485 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636411.062:9256): pid=48485 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636411.268:9257): pid=48485 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636411.269:9258): pid=48485 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636411.272:9259): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636411.272:9260): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636411.289:9261): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636411.289:9262): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636411.291:9263): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=48501 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636411.322:9264): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636411.322:9265): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636411.609:9266): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636411.609:9267): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636411.610:9268): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=48516 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636411.636:9269): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636411.637:9270): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636411.648:9271): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636411.648:9272): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636411.650:9273): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=48530 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636411.708:9274): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636411.708:9275): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636411.730:9276): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636411.730:9277): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636411.731:9278): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=48551 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636411.769:9279): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636411.769:9280): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636411.784:9281): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636411.785:9282): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636411.786:9283): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=48565 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636411.812:9284): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636411.812:9285): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636411.826:9286): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636411.826:9287): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636411.828:9288): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=48580 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636411.901:9289): pid=48595 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636411.901:9290): pid=48595 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D656D75666D77786264637A696972757273786A7871676269757971786871646A203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363431312E363337393435342D34373937352D3235323431393830393538333133322F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636411.901:9291): pid=48595 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636411.903:9292): pid=48595 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636412.114:9293): pid=48595 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636412.114:9294): pid=48595 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636412.117:9295): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636412.117:9296): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636412.132:9297): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636412.136:9298): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636412.137:9299): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=48605 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636412.177:9300): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636412.177:9301): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636412.403:9302): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636412.403:9303): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636412.404:9304): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=48639 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636412.425:9305): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636412.425:9306): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636412.436:9307): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636412.436:9308): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636412.437:9309): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=48654 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636412.470:9310): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636412.470:9311): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636412.491:9312): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636412.491:9313): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636412.493:9314): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=48675 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636412.556:9315): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636412.556:9316): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636412.574:9317): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636412.574:9318): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636412.578:9319): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=48689 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636412.617:9320): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636412.617:9321): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636412.629:9322): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636412.630:9323): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636412.631:9324): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=48722 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636412.699:9325): pid=48743 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636412.699:9326): pid=48743 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D667574666B717573707171636872636B776A6B726B6E697065676F75706D7561203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363431322E343236373436342D34373937352D3137363331393139333936383034322F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636412.699:9327): pid=48743 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636412.701:9328): pid=48743 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636412.931:9329): pid=48743 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636412.931:9330): pid=48743 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636412.933:9331): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636412.933:9332): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636412.948:9333): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636412.949:9334): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636412.950:9335): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=48775 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636412.972:9336): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636412.972:9337): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636413.321:9338): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636413.321:9339): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636413.323:9340): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=48814 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636413.370:9341): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636413.370:9342): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636413.378:9343): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636413.381:9344): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636413.382:9345): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=48834 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636413.449:9346): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636413.449:9347): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636413.474:9348): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636413.474:9349): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636413.479:9350): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=48855 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636413.539:9351): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636413.539:9352): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636413.551:9353): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636413.551:9354): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636413.556:9355): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=48872 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636413.577:9356): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636413.577:9357): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636413.590:9358): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636413.590:9359): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636413.596:9360): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=48887 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636413.667:9361): pid=48902 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636413.667:9362): pid=48902 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D67767277616E6E7166667063766F7662676C7A7665636B72776B79796263666C203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363431332E333639323134332D34373937352D3139373833363939363039383135342F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636413.667:9363): pid=48902 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636413.669:9364): pid=48902 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636413.852:9365): pid=48902 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636413.852:9366): pid=48902 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636413.855:9367): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636413.855:9368): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636413.868:9369): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636413.868:9370): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636413.869:9371): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=48914 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636413.895:9372): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636413.895:9373): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636414.148:9374): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636414.148:9375): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636414.151:9376): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=48956 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636414.183:9377): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636414.183:9378): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636414.195:9379): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636414.195:9380): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636414.199:9381): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=48975 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636414.234:9382): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636414.234:9383): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636414.254:9384): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636414.254:9385): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636414.257:9386): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=49031 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636414.308:9387): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636414.308:9388): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636414.321:9389): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636414.321:9390): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636414.325:9391): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=49065 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636414.363:9392): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636414.363:9393): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636414.377:9394): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636414.377:9395): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636414.378:9396): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=49084 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636414.434:9397): pid=49101 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636414.435:9398): pid=49101 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C6F676E617A6E6766797A6B7175726F6D66686F716D74716970736E6A68766C203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363431342E313834373933372D34373937352D3233383231353335363435343433382F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636414.435:9399): pid=49101 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636414.438:9400): pid=49101 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636414.641:9401): pid=49101 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636414.642:9402): pid=49101 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636414.645:9403): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636414.646:9404): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636414.660:9405): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636414.660:9406): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636414.661:9407): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=49111 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636414.704:9408): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636414.704:9409): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636414.995:9410): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636414.995:9411): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636414.996:9412): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=49126 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636415.019:9413): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636415.019:9414): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636415.029:9415): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636415.032:9416): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636415.033:9417): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=49140 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636415.058:9418): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636415.058:9419): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636415.073:9420): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636415.073:9421): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636415.075:9422): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=49161 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636415.111:9423): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636415.112:9424): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636415.126:9425): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636415.126:9426): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636415.127:9427): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=49175 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636415.166:9428): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636415.166:9429): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636415.180:9430): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636415.180:9431): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636415.184:9432): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=49190 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636415.258:9433): pid=49205 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636415.258:9434): pid=49205 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D787462617A6E7A7A6F6A626F666876676F757178726F78726E6B6D7076726B72203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363431352E303231323136392D34373937352D39323434343734383236353534392F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636415.258:9435): pid=49205 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636415.263:9436): pid=49205 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636415.432:9437): pid=49205 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636415.432:9438): pid=49205 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636415.435:9439): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636415.436:9440): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636415.447:9441): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636415.447:9442): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636415.448:9443): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=49209 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636415.473:9444): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636415.473:9445): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636415.671:9446): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636415.672:9447): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636415.674:9448): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=49230 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636415.691:9449): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636415.691:9450): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636415.703:9451): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636415.703:9452): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636415.704:9453): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=49244 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636415.736:9454): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636415.736:9455): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636415.755:9456): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636415.755:9457): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636415.757:9458): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=49265 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636415.791:9459): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636415.791:9460): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636415.805:9461): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636415.805:9462): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636415.809:9463): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=49279 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636415.832:9464): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636415.832:9465): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636415.843:9466): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636415.843:9467): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636415.844:9468): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=49296 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636415.924:9469): pid=49315 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636415.924:9470): pid=49315 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A776E78717361696A6E6D6A7561637765706B616F7673617365716F686C6F74203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363431352E363935313338322D34373937352D32383438313232333035343132342F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636415.925:9471): pid=49315 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636415.930:9472): pid=49315 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636416.126:9473): pid=49315 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636416.127:9474): pid=49315 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636416.130:9475): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636416.130:9476): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636416.142:9477): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636416.142:9478): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636416.143:9479): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=49319 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636416.195:9480): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636416.195:9481): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636416.411:9482): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636416.411:9483): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636416.414:9484): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=49339 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636416.443:9485): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636416.443:9486): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636416.455:9487): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636416.455:9488): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636416.457:9489): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=49359 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636416.482:9490): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636416.482:9491): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636416.497:9492): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636416.497:9493): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636416.499:9494): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=49380 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636416.534:9495): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636416.534:9496): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636416.546:9497): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636416.548:9498): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636416.550:9499): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=49394 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636416.598:9500): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636416.598:9501): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636416.608:9502): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636416.609:9503): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636416.610:9504): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=49409 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636416.662:9505): pid=49424 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636416.662:9506): pid=49424 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F7269686A736E7972727378696372696C6A75736275656B69746561746A7779203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363431362E3434343739382D34373937352D32353533393832343433343037392F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636416.662:9507): pid=49424 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636416.664:9508): pid=49424 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636416.832:9509): pid=49424 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636416.833:9510): pid=49424 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636416.835:9511): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636416.835:9512): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636416.848:9513): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636416.848:9514): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636416.849:9515): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=49428 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636416.871:9516): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636416.872:9517): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636417.066:9518): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636417.067:9519): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636417.068:9520): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=49445 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636417.087:9521): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636417.087:9522): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636417.097:9523): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636417.097:9524): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636417.100:9525): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=49461 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636417.120:9526): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636417.120:9527): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636417.136:9528): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636417.136:9529): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636417.137:9530): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=49486 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636417.171:9531): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636417.171:9532): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636417.189:9533): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636417.189:9534): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636417.192:9535): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=49500 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636417.213:9536): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636417.213:9537): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636417.227:9538): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636417.227:9539): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636417.228:9540): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=49517 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636417.287:9541): pid=49536 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636417.287:9542): pid=49536 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D706D646C77776E6A706872746B6D736B6B69736265696475686D686B72786763203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363431372E303837393930352D34373937352D3232323634313830373737353439352F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636417.288:9543): pid=49536 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636417.289:9544): pid=49536 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636417.492:9545): pid=49536 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636417.493:9546): pid=49536 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636417.495:9547): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636417.496:9548): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636417.509:9549): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636417.510:9550): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636417.511:9551): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=49540 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636417.533:9552): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636417.534:9553): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636417.817:9554): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636417.817:9555): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636417.818:9556): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=49555 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636417.845:9557): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636417.845:9558): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636417.859:9559): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636417.859:9560): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636417.860:9561): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=49571 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636417.890:9562): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636417.890:9563): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636417.908:9564): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636417.908:9565): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636417.909:9566): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=49596 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636417.941:9567): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636417.941:9568): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636417.955:9569): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636417.955:9570): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636417.959:9571): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=49610 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636417.981:9572): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636417.981:9573): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636417.996:9574): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636417.996:9575): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636417.998:9576): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=49625 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636418.051:9577): pid=49640 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636418.052:9578): pid=49640 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7862786573666F666F6370726A796B6C716A78736A62787768666D717A646A6E203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363431372E3834373039392D34373937352D32303132333936363035383039362F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636418.052:9579): pid=49640 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636418.054:9580): pid=49640 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636418.255:9581): pid=49640 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636418.256:9582): pid=49640 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636418.259:9583): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636418.259:9584): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636418.273:9585): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636418.274:9586): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636418.275:9587): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=49644 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636418.300:9588): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636418.300:9589): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636418.538:9590): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636418.539:9591): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636418.540:9592): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=49665 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636418.565:9593): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636418.565:9594): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636418.577:9595): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636418.577:9596): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636418.578:9597): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=49679 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636418.609:9598): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636418.609:9599): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636418.620:9600): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636418.620:9601): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636418.621:9602): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=49702 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636418.651:9603): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636418.651:9604): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636418.663:9605): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636418.663:9606): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636418.664:9607): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=49720 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636418.681:9608): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636418.681:9609): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636418.693:9610): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636418.693:9611): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636418.694:9612): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=49735 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636418.747:9613): pid=49750 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636418.747:9614): pid=49750 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D67636A6D747A64716B65786663747561756566696F636E716A6976726C6D7A63203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363431382E353636323539312D34373937352D3233383530383936323037343238342F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636418.747:9615): pid=49750 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636418.749:9616): pid=49750 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636418.939:9617): pid=49750 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636418.939:9618): pid=49750 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636418.942:9619): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636418.942:9620): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636418.954:9621): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636418.955:9622): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636418.956:9623): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=49754 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636418.975:9624): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636418.975:9625): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636419.204:9626): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636419.204:9627): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636419.205:9628): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=49769 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636419.228:9629): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636419.228:9630): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636419.239:9631): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636419.239:9632): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636419.240:9633): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=49783 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636419.312:9634): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636419.312:9635): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636419.330:9636): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636419.330:9637): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636419.331:9638): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=49806 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636419.364:9639): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636419.364:9640): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636419.378:9641): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636419.379:9642): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636419.380:9643): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=49824 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636419.399:9644): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636419.399:9645): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636419.413:9646): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636419.413:9647): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636419.414:9648): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=49839 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636419.467:9649): pid=49854 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636419.467:9650): pid=49854 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7978696273746A65646E6B736A6575636A726B75656C72756978787172637879203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363431392E323330313630372D34373937352D38333635333139393334373030312F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636419.468:9651): pid=49854 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636419.470:9652): pid=49854 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636419.677:9653): pid=49854 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636419.678:9654): pid=49854 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636419.710:9655): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636419.710:9656): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636419.710:9657): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636419.710:9658): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636419.712:9659): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=49864 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636419.739:9660): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636419.739:9661): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636420.020:9662): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636420.020:9663): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636420.021:9664): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=49879 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636420.047:9665): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636420.047:9666): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636420.058:9667): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636420.058:9668): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636420.060:9669): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=49893 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636420.117:9670): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636420.117:9671): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636420.134:9672): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636420.134:9673): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636420.135:9674): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=49916 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636420.174:9675): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636420.174:9676): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636420.186:9677): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636420.186:9678): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636420.187:9679): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=49934 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636420.207:9680): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636420.207:9681): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636420.219:9682): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636420.219:9683): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636420.221:9684): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=49949 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636420.276:9685): pid=49964 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636420.276:9686): pid=49964 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D736C716C6C71776E6B7666626D7478696A73707164757964796979667A687678203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363432302E3034383034332D34373937352D3232333931373233393435393436312F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636420.276:9687): pid=49964 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636420.278:9688): pid=49964 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636420.549:9689): pid=49964 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636420.549:9690): pid=49964 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636420.552:9691): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636420.552:9692): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636420.563:9693): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636420.563:9694): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636420.565:9695): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=49968 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636420.585:9696): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636420.586:9697): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636420.792:9698): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636420.792:9699): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636420.796:9700): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=49983 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636420.813:9701): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636420.813:9702): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636420.823:9703): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636420.823:9704): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636420.828:9705): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=49997 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636420.876:9706): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636420.876:9707): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636420.893:9708): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636420.893:9709): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636420.895:9710): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=50020 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636420.926:9711): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636420.926:9712): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636420.939:9713): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636420.939:9714): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636420.940:9715): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=50038 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636420.961:9716): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636420.961:9717): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636420.972:9718): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636420.972:9719): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636420.975:9720): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=50053 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636421.027:9721): pid=50070 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636421.027:9722): pid=50070 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D70626E657A637A716964786C6A747764676779626E6F61747865647966696579203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363432302E383134373035362D34373937352D3134383537373634323836393439332F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636421.027:9723): pid=50070 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636421.029:9724): pid=50070 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636421.230:9725): pid=50070 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636421.231:9726): pid=50070 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636421.233:9727): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636421.234:9728): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636421.246:9729): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636421.246:9730): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636421.247:9731): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=50078 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636421.269:9732): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636421.269:9733): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636421.517:9734): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636421.517:9735): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636421.518:9736): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=50093 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636421.536:9737): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636421.536:9738): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636421.548:9739): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636421.548:9740): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636421.549:9741): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=50107 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636421.595:9742): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636421.595:9743): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636421.613:9744): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636421.613:9745): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636421.614:9746): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=50128 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636421.751:9747): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636421.751:9748): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636421.767:9749): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636421.767:9750): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636421.769:9751): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=50144 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636421.791:9752): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636421.791:9753): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636421.803:9754): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636421.803:9755): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636421.804:9756): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=50163 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636421.865:9757): pid=50178 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636421.865:9758): pid=50178 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D68626A73666C636C696A6B6C7A646F71616F6E637073767671756E7562756169203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363432312E353338323033322D34373937352D3139363238323332353838333238302F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636421.866:9759): pid=50178 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636421.868:9760): pid=50178 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636422.138:9761): pid=50178 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636422.139:9762): pid=50178 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636422.141:9763): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636422.142:9764): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636422.155:9765): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636422.156:9766): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636422.157:9767): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=50188 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636422.187:9768): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636422.187:9769): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636422.435:9770): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636422.435:9771): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636422.437:9772): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=50203 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636422.457:9773): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636422.457:9774): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636422.468:9775): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636422.468:9776): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636422.469:9777): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=50217 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636422.496:9778): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636422.496:9779): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636422.514:9780): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636422.514:9781): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636422.515:9782): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=50240 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636422.545:9783): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636422.545:9784): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636422.558:9785): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636422.558:9786): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636422.560:9787): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=50258 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636422.579:9788): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636422.579:9789): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636422.590:9790): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636422.590:9791): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636422.592:9792): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=50273 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636422.645:9793): pid=50288 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636422.645:9794): pid=50288 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D666B686A66796D78766C6B7862757063686E616C707471706D73797077706277203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363432322E3435393238372D34373937352D31313735343833373935333830332F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636422.646:9795): pid=50288 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636422.647:9796): pid=50288 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636422.815:9797): pid=50288 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636422.815:9798): pid=50288 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636422.818:9799): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636422.820:9800): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636422.832:9801): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636422.832:9802): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636422.833:9803): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=50292 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636422.854:9804): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636422.854:9805): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636423.074:9806): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636423.074:9807): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636423.075:9808): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=50307 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636423.097:9809): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636423.097:9810): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636423.107:9811): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636423.107:9812): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636423.108:9813): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=50321 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636423.132:9814): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636423.132:9815): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636423.149:9816): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636423.149:9817): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636423.150:9818): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=50342 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636423.181:9819): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636423.182:9820): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636423.198:9821): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636423.199:9822): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636423.200:9823): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=50356 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636423.221:9824): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636423.221:9825): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636423.233:9826): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636423.233:9827): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636423.234:9828): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=50373 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636423.291:9829): pid=50389 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636423.291:9830): pid=50389 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C70777777616B6D6A706569796675736763676579617770666767667A766D73203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363432332E303938303332352D34373937352D3132313131353039373130383837332F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636423.291:9831): pid=50389 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636423.293:9832): pid=50389 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636423.458:9833): pid=50389 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636423.458:9834): pid=50389 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636423.461:9835): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636423.462:9836): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636423.475:9837): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636423.475:9838): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636423.476:9839): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=50402 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636423.496:9840): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636423.496:9841): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636423.696:9842): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636423.697:9843): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636423.698:9844): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=50417 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636423.717:9845): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636423.717:9846): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636423.728:9847): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636423.728:9848): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636423.730:9849): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=50431 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636423.752:9850): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636423.752:9851): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636423.778:9852): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636423.779:9853): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636423.780:9854): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=50452 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636423.823:9855): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636423.823:9856): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636423.838:9857): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636423.838:9858): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636423.839:9859): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=50466 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636423.860:9860): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636423.860:9861): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636423.871:9862): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636423.871:9863): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636423.872:9864): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=50481 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636423.933:9865): pid=50496 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636423.933:9866): pid=50496 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C63716A686F6C616678776975716B72656669626B737463717170687267706E203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363432332E373138323939362D34373937352D32323734373333343939393534322F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636423.933:9867): pid=50496 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636423.936:9868): pid=50496 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636424.113:9869): pid=50496 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636424.113:9870): pid=50496 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636424.116:9871): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636424.117:9872): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636424.128:9873): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636424.128:9874): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636424.129:9875): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=50506 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636424.148:9876): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636424.148:9877): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636424.358:9878): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636424.358:9879): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636424.359:9880): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=50521 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636424.381:9881): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636424.381:9882): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636424.391:9883): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636424.391:9884): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636424.392:9885): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=50535 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636424.417:9886): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636424.417:9887): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636424.434:9888): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636424.434:9889): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636424.436:9890): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=50556 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636424.469:9891): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636424.469:9892): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636424.481:9893): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636424.481:9894): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636424.484:9895): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=50572 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636424.505:9896): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636424.505:9897): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636424.517:9898): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636424.518:9899): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636424.519:9900): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=50591 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636424.574:9901): pid=50606 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636424.575:9902): pid=50606 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D67707572767767697A657361706574687467796A7265746E6B66776F7A727663203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363432342E333832353331362D34373937352D3135373733393032383135343530312F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636424.575:9903): pid=50606 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636424.577:9904): pid=50606 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636424.760:9905): pid=50606 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636424.760:9906): pid=50606 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636424.766:9907): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636424.766:9908): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636424.777:9909): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636424.777:9910): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636424.779:9911): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=50612 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636424.799:9912): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636424.799:9913): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636425.019:9914): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636425.019:9915): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636425.021:9916): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=50631 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636425.040:9917): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636425.040:9918): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636425.050:9919): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636425.050:9920): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636425.051:9921): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=50645 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636425.076:9922): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636425.076:9923): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636425.088:9924): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636425.088:9925): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636425.089:9926): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=50666 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636425.118:9927): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636425.118:9928): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636425.130:9929): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636425.130:9930): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636425.131:9931): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=50680 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636425.150:9932): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636425.150:9933): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636425.162:9934): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636425.163:9935): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636425.164:9936): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=50695 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636425.216:9937): pid=50710 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636425.216:9938): pid=50710 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D757062707271706F6E6F746B6965697A6F6A73756964656B626D747777646672203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363432352E303430393230352D34373937352D31333635373334333433373430332F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636425.217:9939): pid=50710 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636425.219:9940): pid=50710 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636425.396:9941): pid=50710 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636425.396:9942): pid=50710 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636425.399:9943): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636425.400:9944): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636425.411:9945): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636425.412:9946): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636425.413:9947): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=50714 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636425.432:9948): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636425.432:9949): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636425.637:9950): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636425.637:9951): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636425.638:9952): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=50741 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636425.657:9953): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636425.657:9954): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636425.668:9955): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636425.668:9956): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636425.669:9957): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=50755 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636425.694:9958): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636425.694:9959): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636425.712:9960): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636425.712:9961): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636425.713:9962): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=50776 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636425.747:9963): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636425.747:9964): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636425.761:9965): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636425.761:9966): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636425.762:9967): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=50790 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636425.794:9968): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636425.794:9969): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636425.810:9970): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636425.810:9971): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636425.814:9972): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=50805 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636425.872:9973): pid=50820 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636425.873:9974): pid=50820 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F68746F636C7A7074767A7470636771716F69667372776D766E69646A647471203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363432352E363539313030382D34373937352D38373438343436383832303033342F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636425.873:9975): pid=50820 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636425.875:9976): pid=50820 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636426.068:9977): pid=50820 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636426.069:9978): pid=50820 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636426.071:9979): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636426.073:9980): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636426.085:9981): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636426.085:9982): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636426.086:9983): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=50824 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636426.108:9984): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636426.108:9985): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636426.365:9986): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636426.365:9987): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636426.366:9988): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=50845 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636426.385:9989): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636426.385:9990): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636426.395:9991): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636426.395:9992): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636426.396:9993): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=50859 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636426.418:9994): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636426.418:9995): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636426.434:9996): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636426.434:9997): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636426.435:9998): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=50880 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636426.464:9999): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636426.464:10000): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636426.476:10001): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636426.476:10002): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636426.477:10003): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=50894 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636426.497:10004): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636426.497:10005): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636426.508:10006): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636426.508:10007): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636426.509:10008): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=50909 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636426.567:10009): pid=50924 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636426.567:10010): pid=50924 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D636465686B646E79716D667770676A7A62786873746275717463666F61646468203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363432362E333836323636352D34373937352D3139383033373232333630393937382F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636426.568:10011): pid=50924 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636426.570:10012): pid=50924 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=BPF msg=audit(1744636426.807:10013): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636426.807:10014): prog-id=0 op=UNLOAD type=USER_END msg=audit(1744636426.827:10015): pid=50924 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636426.827:10016): pid=50924 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636426.832:10017): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636426.832:10018): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636426.844:10019): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636426.844:10020): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636426.845:10021): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=50954 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636426.872:10022): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636426.872:10023): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=BPF msg=audit(1744636427.079:10024): prog-id=358 op=LOAD type=BPF msg=audit(1744636427.080:10025): prog-id=359 op=LOAD type=SYSCALL msg=audit(1744636427.080:10025): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000239ad0 a2=90 a3=0 items=0 ppid=50977 pid=50988 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636427.080:10025): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32343639653431393465383538333463663835636666343235 type=BPF msg=audit(1744636427.081:10026): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636427.081:10027): prog-id=360 op=LOAD type=SYSCALL msg=audit(1744636427.081:10027): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000239c48 a2=90 a3=0 items=0 ppid=50977 pid=50988 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636427.081:10027): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32343639653431393465383538333463663835636666343235 type=BPF msg=audit(1744636427.081:10028): prog-id=361 op=LOAD type=SYSCALL msg=audit(1744636427.081:10028): arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=c0002399d8 a2=90 a3=0 items=0 ppid=50977 pid=50988 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636427.081:10028): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32343639653431393465383538333463663835636666343235 type=BPF msg=audit(1744636427.081:10029): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636427.081:10030): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636427.081:10031): prog-id=362 op=LOAD type=SYSCALL msg=audit(1744636427.081:10031): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000239eb0 a2=90 a3=0 items=0 ppid=50977 pid=50988 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636427.081:10031): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32343639653431393465383538333463663835636666343235 type=USER_LOGIN msg=audit(1744636427.096:10032): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636427.096:10033): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636427.097:10034): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=51012 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636427.116:10035): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636427.116:10036): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636427.128:10037): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636427.128:10038): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636427.129:10039): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=51026 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636427.166:10040): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636427.166:10041): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636427.177:10042): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636427.177:10043): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636427.178:10044): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=51069 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636427.223:10045): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636427.223:10046): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636427.236:10047): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636427.236:10048): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636427.239:10049): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=51107 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636427.262:10050): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636427.262:10051): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636427.276:10052): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636427.276:10053): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636427.278:10054): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=51133 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636427.341:10055): pid=51151 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636427.342:10056): pid=51151 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D736C6B6D6F6171776A62686C726B726D646B696C61736C73726263666D6963203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363432372E313137373433332D34373937352D3138393937353736313033313637332F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636427.342:10057): pid=51151 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636427.345:10058): pid=51151 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636427.522:10059): pid=51151 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636427.522:10060): pid=51151 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636427.525:10061): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636427.525:10062): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636427.537:10063): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636427.537:10064): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636427.538:10065): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=51157 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636427.562:10066): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636427.562:10067): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636427.843:10068): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636427.843:10069): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636427.844:10070): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=51172 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636427.866:10071): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636427.866:10072): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636427.879:10073): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636427.879:10074): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636427.880:10075): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=51188 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636427.919:10076): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636427.919:10077): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636427.940:10078): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636427.940:10079): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636427.942:10080): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=51213 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636427.979:10081): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636427.979:10082): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636427.998:10083): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636427.998:10084): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636427.999:10085): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=51227 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636428.024:10086): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636428.024:10087): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636428.039:10088): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636428.039:10089): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636428.040:10090): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=51242 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636428.101:10091): pid=51257 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636428.101:10092): pid=51257 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D646465776D627A716E686E78726C7068686E6167766F66676F716869686F746B203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363432372E383638313139322D34373937352D3231323830323231363530373937322F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636428.101:10093): pid=51257 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636428.104:10094): pid=51257 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636428.364:10095): pid=51257 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636428.364:10096): pid=51257 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636428.367:10097): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636428.369:10098): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636428.382:10099): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636428.382:10100): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636428.383:10101): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=51267 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636428.402:10102): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636428.402:10103): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636428.619:10104): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636428.619:10105): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636428.621:10106): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=51282 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636428.647:10107): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636428.647:10108): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636428.659:10109): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636428.659:10110): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636428.660:10111): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=51296 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636428.692:10112): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636428.692:10113): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636428.709:10114): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636428.709:10115): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636428.710:10116): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=51319 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636428.742:10117): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636428.742:10118): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636428.757:10119): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636428.757:10120): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636428.758:10121): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=51337 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636428.777:10122): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636428.777:10123): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636428.791:10124): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636428.792:10125): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636428.793:10126): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=51352 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636428.852:10127): pid=51367 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636428.852:10128): pid=51367 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D68626366677A717071637A776C6C68777576737A6C74706E616A7A6663667864203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363432382E363438353332342D34373937352D34333131323836343636353331342F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636428.852:10129): pid=51367 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636428.854:10130): pid=51367 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636429.049:10131): pid=51367 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636429.050:10132): pid=51367 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636429.052:10133): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636429.053:10134): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636429.065:10135): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636429.065:10136): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636429.066:10137): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=51371 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636429.087:10138): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636429.087:10139): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636429.300:10140): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636429.300:10141): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636429.302:10142): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=51386 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636429.330:10143): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636429.330:10144): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636429.344:10145): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636429.344:10146): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636429.345:10147): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=51400 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636429.381:10148): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636429.381:10149): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636429.397:10150): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636429.397:10151): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636429.398:10152): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=51423 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636429.430:10153): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636429.430:10154): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636429.445:10155): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636429.445:10156): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636429.446:10157): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=51443 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636429.468:10158): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636429.468:10159): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636429.481:10160): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636429.481:10161): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636429.482:10162): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=51462 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636429.535:10163): pid=51477 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636429.535:10164): pid=51477 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D67727363696C646A61797A7A6E66776F6A6677726E6B7575636D766A61707A70203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363432392E333330313039342D34373937352D3135333437313130353838333232372F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636429.536:10165): pid=51477 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636429.538:10166): pid=51477 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636429.704:10167): pid=51477 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636429.705:10168): pid=51477 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636429.707:10169): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636429.708:10170): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636429.719:10171): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636429.720:10172): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636429.721:10173): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=51481 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636429.748:10174): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636429.749:10175): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636430.360:10176): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636430.360:10177): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636430.362:10178): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=51515 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636430.380:10179): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636430.380:10180): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636430.397:10181): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636430.397:10182): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636430.397:10183): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=51529 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636430.421:10184): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636430.421:10185): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636430.578:10186): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636430.578:10187): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636430.580:10188): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=51552 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636430.609:10189): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636430.609:10190): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636430.620:10191): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636430.620:10192): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636430.622:10193): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=51566 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636430.643:10194): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636430.643:10195): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636430.655:10196): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636430.655:10197): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636430.657:10198): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=51585 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636430.717:10199): pid=51600 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636430.717:10200): pid=51600 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D6A7165617A77626767636D6A6672707865747068686162746D757579766E79203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363433302E333832393739362D35313530372D383235393031363435343734312F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636430.718:10201): pid=51600 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636430.720:10202): pid=51600 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636430.883:10203): pid=51600 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636430.883:10204): pid=51600 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636430.888:10205): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636430.888:10206): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636430.904:10207): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636430.904:10208): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636430.905:10209): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=51605 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636430.929:10210): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636430.929:10211): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636430.944:10212): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636430.944:10213): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636430.945:10214): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=51619 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636430.968:10215): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636430.968:10216): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636430.986:10217): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636430.986:10218): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636430.988:10219): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=51635 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636431.018:10220): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636431.018:10221): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636431.030:10222): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636431.030:10223): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636431.031:10224): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=51649 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636431.051:10225): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636431.051:10226): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636431.064:10227): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636431.064:10228): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636431.065:10229): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=51666 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636431.120:10230): pid=51685 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636431.120:10231): pid=51685 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F7663796E7A617A686167626A67726D6D6B746B686171676A6573716D666A6C203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363433302E333832393739362D35313530372D383235393031363435343734312F416E736962616C6C5A5F636F70792E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636431.121:10232): pid=51685 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636431.123:10233): pid=51685 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636431.313:10234): pid=51685 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636431.313:10235): pid=51685 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636431.316:10236): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636431.317:10237): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636431.330:10238): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636431.330:10239): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636431.331:10240): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=51691 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636431.377:10241): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636431.377:10242): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636431.683:10243): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636431.683:10244): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636431.684:10245): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=51712 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636431.705:10246): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636431.706:10247): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636431.721:10248): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636431.721:10249): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636431.723:10250): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=51726 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636431.764:10251): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636431.764:10252): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636431.783:10253): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636431.783:10254): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636431.784:10255): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=51749 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636431.829:10256): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636431.829:10257): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636431.845:10258): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636431.845:10259): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636431.849:10260): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=51763 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636431.886:10261): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636431.886:10262): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636431.901:10263): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636431.901:10264): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636431.902:10265): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=51778 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636431.994:10266): pid=51793 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636431.995:10267): pid=51793 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd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exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636431.995:10268): pid=51793 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636432.002:10269): pid=51793 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=BPF msg=audit(1744636432.789:10270): prog-id=363 op=LOAD type=SYSCALL msg=audit(1744636432.789:10270): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bfc48 a2=90 a3=0 items=0 ppid=51909 pid=51920 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636432.789:10270): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30643865323939316534363237666337373862356532613336 type=BPF msg=audit(1744636432.789:10271): prog-id=364 op=LOAD type=SYSCALL msg=audit(1744636432.789:10271): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c0001bf9d8 a2=90 a3=0 items=0 ppid=51909 pid=51920 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636432.789:10271): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30643865323939316534363237666337373862356532613336 type=BPF msg=audit(1744636432.789:10272): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636432.789:10273): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636432.789:10274): prog-id=365 op=LOAD type=SYSCALL msg=audit(1744636432.789:10274): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bfeb0 a2=90 a3=0 items=0 ppid=51909 pid=51920 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636432.789:10274): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30643865323939316534363237666337373862356532613336 type=BPF msg=audit(1744636433.135:10275): prog-id=366 op=LOAD type=BPF msg=audit(1744636433.138:10276): prog-id=367 op=LOAD type=SYSCALL msg=audit(1744636433.138:10276): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00019bad0 a2=90 a3=0 items=0 ppid=52015 pid=52030 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636433.138:10276): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65343161376636653831353465333234323664386165393866 type=BPF msg=audit(1744636433.139:10277): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636433.141:10278): prog-id=368 op=LOAD type=SYSCALL msg=audit(1744636433.141:10278): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00019bc48 a2=90 a3=0 items=0 ppid=52015 pid=52030 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636433.141:10278): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65343161376636653831353465333234323664386165393866 type=BPF msg=audit(1744636433.141:10279): prog-id=369 op=LOAD type=SYSCALL msg=audit(1744636433.141:10279): arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=c00019b9d8 a2=90 a3=0 items=0 ppid=52015 pid=52030 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636433.141:10279): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65343161376636653831353465333234323664386165393866 type=BPF msg=audit(1744636433.141:10280): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636433.141:10281): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636433.141:10282): prog-id=370 op=LOAD type=SYSCALL msg=audit(1744636433.141:10282): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00019beb0 a2=90 a3=0 items=0 ppid=52015 pid=52030 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636433.141:10282): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65343161376636653831353465333234323664386165393866 type=BPF msg=audit(1744636433.229:10283): prog-id=371 op=LOAD type=BPF msg=audit(1744636433.230:10284): prog-id=372 op=LOAD type=SYSCALL msg=audit(1744636433.230:10284): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00011bad0 a2=90 a3=0 items=0 ppid=52083 pid=52120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636433.230:10284): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65323330353939633639323563623862346330643232653264 type=BPF msg=audit(1744636433.230:10285): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636433.230:10286): prog-id=373 op=LOAD type=SYSCALL msg=audit(1744636433.230:10286): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00011bc48 a2=90 a3=0 items=0 ppid=52083 pid=52120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636433.230:10286): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65323330353939633639323563623862346330643232653264 type=BPF msg=audit(1744636433.231:10287): prog-id=374 op=LOAD type=SYSCALL msg=audit(1744636433.231:10287): arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=c00011b9d8 a2=90 a3=0 items=0 ppid=52083 pid=52120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636433.231:10287): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65323330353939633639323563623862346330643232653264 type=BPF msg=audit(1744636433.231:10288): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636433.231:10289): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636433.231:10290): prog-id=375 op=LOAD type=SYSCALL msg=audit(1744636433.231:10290): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00011beb0 a2=90 a3=0 items=0 ppid=52083 pid=52120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636433.231:10290): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65323330353939633639323563623862346330643232653264 type=BPF msg=audit(1744636433.271:10291): prog-id=376 op=LOAD type=BPF msg=audit(1744636433.273:10292): prog-id=377 op=LOAD type=SYSCALL msg=audit(1744636433.273:10292): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001b9ad0 a2=90 a3=0 items=0 ppid=52144 pid=52176 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636433.273:10292): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66316533363566626662333463396637313832653035303563 type=BPF msg=audit(1744636433.273:10293): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636433.273:10294): prog-id=378 op=LOAD type=SYSCALL msg=audit(1744636433.273:10294): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001b9c48 a2=90 a3=0 items=0 ppid=52144 pid=52176 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636433.273:10294): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66316533363566626662333463396637313832653035303563 type=BPF msg=audit(1744636433.273:10295): prog-id=379 op=LOAD type=SYSCALL msg=audit(1744636433.273:10295): arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=c0001b99d8 a2=90 a3=0 items=0 ppid=52144 pid=52176 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636433.273:10295): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66316533363566626662333463396637313832653035303563 type=BPF msg=audit(1744636433.273:10296): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636433.273:10297): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636433.273:10298): prog-id=380 op=LOAD type=SYSCALL msg=audit(1744636433.273:10298): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001b9eb0 a2=90 a3=0 items=0 ppid=52144 pid=52176 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636433.273:10298): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66316533363566626662333463396637313832653035303563 type=BPF msg=audit(1744636433.406:10299): prog-id=381 op=LOAD type=BPF msg=audit(1744636433.408:10300): prog-id=382 op=LOAD type=SYSCALL msg=audit(1744636433.408:10300): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00011dad0 a2=90 a3=0 items=0 ppid=52130 pid=52230 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636433.408:10300): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34333562323639653062653234376265343164663438386437 type=BPF msg=audit(1744636433.408:10301): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636433.408:10302): prog-id=383 op=LOAD type=SYSCALL msg=audit(1744636433.408:10302): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00011dc48 a2=90 a3=0 items=0 ppid=52130 pid=52230 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636433.408:10302): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34333562323639653062653234376265343164663438386437 type=BPF msg=audit(1744636433.408:10303): prog-id=384 op=LOAD type=SYSCALL msg=audit(1744636433.408:10303): arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=c00011d9d8 a2=90 a3=0 items=0 ppid=52130 pid=52230 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636433.408:10303): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34333562323639653062653234376265343164663438386437 type=BPF msg=audit(1744636433.408:10304): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636433.408:10305): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636433.408:10306): prog-id=385 op=LOAD type=SYSCALL msg=audit(1744636433.408:10306): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00011deb0 a2=90 a3=0 items=0 ppid=52130 pid=52230 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636433.408:10306): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34333562323639653062653234376265343164663438386437 type=BPF msg=audit(1744636433.925:10307): prog-id=386 op=LOAD type=SYSCALL msg=audit(1744636433.925:10307): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c000125c48 a2=90 a3=0 items=0 ppid=52586 pid=52626 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636433.925:10307): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35343930666130653966646365663664346635636632303965 type=BPF msg=audit(1744636433.925:10308): prog-id=387 op=LOAD type=SYSCALL msg=audit(1744636433.925:10308): arch=c000003e syscall=321 success=yes exit=22 a0=5 a1=c0001259d8 a2=90 a3=0 items=0 ppid=52586 pid=52626 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636433.925:10308): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35343930666130653966646365663664346635636632303965 type=BPF msg=audit(1744636433.925:10309): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636433.925:10310): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636433.925:10311): prog-id=388 op=LOAD type=SYSCALL msg=audit(1744636433.925:10311): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c000125eb0 a2=90 a3=0 items=0 ppid=52586 pid=52626 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636433.925:10311): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35343930666130653966646365663664346635636632303965 type=USER_END msg=audit(1744636434.088:10312): pid=51793 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636434.088:10313): pid=51793 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636434.092:10314): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636434.092:10315): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636434.106:10316): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636434.106:10317): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636434.107:10318): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=52911 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636434.134:10319): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636434.134:10320): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=BPF msg=audit(1744636434.277:10321): prog-id=0 op=UNLOAD type=USER_LOGIN msg=audit(1744636434.889:10322): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636434.889:10323): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636434.891:10324): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=53060 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636434.911:10325): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636434.911:10326): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636434.925:10327): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636434.925:10328): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636434.926:10329): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=53074 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636434.973:10330): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636434.973:10331): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636434.990:10332): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636434.993:10333): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636434.994:10334): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=53095 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636435.045:10335): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636435.045:10336): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636435.057:10337): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636435.057:10338): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636435.059:10339): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=53110 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636435.082:10340): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636435.082:10341): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636435.097:10342): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636435.097:10343): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636435.099:10344): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=53125 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636435.167:10345): pid=53140 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636435.168:10346): pid=53140 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D617769727579756D6F727269667677617579756577796363696A716F6D647561203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363433342E393133343435352D35333035352D3233353230383637313735363134342F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636435.168:10347): pid=53140 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636435.171:10348): pid=53140 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636435.532:10349): pid=53140 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636435.532:10350): pid=53140 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636435.535:10351): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636435.535:10352): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636435.547:10353): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636435.547:10354): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636435.550:10355): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=53152 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636435.590:10356): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636435.590:10357): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636435.887:10358): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636435.887:10359): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636435.888:10360): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=53187 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636435.915:10361): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636435.915:10362): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636435.929:10363): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636435.929:10364): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636435.930:10365): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=53205 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636435.959:10366): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636435.959:10367): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636435.977:10368): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636435.977:10369): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636435.979:10370): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=53238 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636436.037:10371): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636436.037:10372): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636436.052:10373): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636436.052:10374): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636436.053:10375): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=53252 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636436.082:10376): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636436.082:10377): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636436.102:10378): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636436.102:10379): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636436.106:10380): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=53269 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636436.170:10381): pid=53284 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636436.170:10382): pid=53284 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D61686A65796576676E6E636B7164756567706F617A7762757968666D62666A78203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363433352E393230313634362D35333035352D3132393739333833373939373238332F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636436.170:10383): pid=53284 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636436.175:10384): pid=53284 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636436.501:10385): pid=53284 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636436.503:10386): pid=53284 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636436.506:10387): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636436.506:10388): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636436.524:10389): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636436.524:10390): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636436.527:10391): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=53303 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636436.564:10392): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636436.565:10393): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636436.848:10394): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636436.848:10395): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636436.849:10396): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=53322 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636436.887:10397): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636436.887:10398): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636436.899:10399): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636436.899:10400): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636436.900:10401): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=53336 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636436.945:10402): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636436.945:10403): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636436.966:10404): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636436.966:10405): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636436.967:10406): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=53358 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636437.008:10407): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636437.008:10408): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636437.019:10409): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636437.019:10410): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636437.020:10411): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=53372 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636437.046:10412): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636437.046:10413): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636437.060:10414): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636437.060:10415): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636437.061:10416): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=53389 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636437.157:10417): pid=53404 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636437.158:10418): pid=53404 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D716F696D6B7A70747362617A6F6F796568646D647A7A7A717A67756A6D756574203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363433362E383930323231342D35333035352D3131373333383135353139383931342F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636437.158:10419): pid=53404 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636437.161:10420): pid=53404 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636456.540:10421): pid=53404 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636456.541:10422): pid=53404 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636456.544:10423): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636456.544:10424): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636456.555:10425): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636456.556:10426): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636456.557:10427): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=53633 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636456.579:10428): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636456.579:10429): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636456.857:10430): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636456.857:10431): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636456.858:10432): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=53648 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636456.875:10433): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636456.875:10434): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636456.886:10435): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636456.886:10436): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636456.887:10437): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=53662 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636456.917:10438): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636456.917:10439): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636456.938:10440): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636456.938:10441): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636456.941:10442): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=53683 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636457.012:10443): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636457.012:10444): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636457.024:10445): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636457.024:10446): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636457.026:10447): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=53697 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636457.050:10448): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636457.050:10449): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636457.062:10450): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636457.062:10451): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636457.063:10452): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=53712 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636457.123:10453): pid=53729 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636457.123:10454): pid=53729 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7770616577767779636D72686368626670777771716F7276616B757261776665203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363435362E3837363737332D35333035352D3136313235393334323232313839342F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636457.124:10455): pid=53729 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636457.127:10456): pid=53729 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636457.442:10457): pid=53729 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636457.442:10458): pid=53729 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636457.445:10459): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636457.446:10460): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636457.457:10461): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636457.457:10462): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636457.458:10463): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=53753 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636457.479:10464): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636457.479:10465): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636457.748:10466): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636457.749:10467): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636457.751:10468): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=53768 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636457.771:10469): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636457.771:10470): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636457.781:10471): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636457.781:10472): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636457.782:10473): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=53782 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636457.809:10474): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636457.809:10475): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636457.826:10476): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636457.826:10477): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636457.828:10478): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=53803 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636457.859:10479): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636457.859:10480): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636457.871:10481): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636457.871:10482): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636457.872:10483): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=53817 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636457.894:10484): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636457.895:10485): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636457.906:10486): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636457.906:10487): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636457.908:10488): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=53832 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636457.965:10489): pid=53847 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636457.965:10490): pid=53847 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D70716A6D6C626A656678657363657A6C6C6678686D666B796161676576646968203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363435372E373732323536342D35333035352D343737343239353236353733382F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636457.966:10491): pid=53847 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636457.968:10492): pid=53847 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636458.265:10493): pid=53847 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636458.266:10494): pid=53847 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636458.269:10495): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636458.271:10496): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636458.285:10497): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636458.285:10498): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636458.286:10499): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=53865 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636458.313:10500): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636458.313:10501): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636458.615:10502): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636458.615:10503): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636458.617:10504): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=53887 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636458.637:10505): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636458.637:10506): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636458.647:10507): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636458.647:10508): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636458.649:10509): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=53901 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636458.672:10510): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636458.672:10511): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636458.687:10512): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636458.687:10513): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636458.688:10514): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=53922 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636458.724:10515): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636458.724:10516): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636458.735:10517): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636458.735:10518): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636458.736:10519): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=53936 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636458.755:10520): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636458.755:10521): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636458.769:10522): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636458.769:10523): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636458.773:10524): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=53951 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636458.833:10525): pid=53966 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636458.833:10526): pid=53966 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D747A74636D647A7762676D66797376646A6A7177737A70696569676E6A697978203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363435382E363338303035372D35333837392D3131343438353830333032303233392F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636458.833:10527): pid=53966 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636458.835:10528): pid=53966 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636459.021:10529): pid=53966 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636459.021:10530): pid=53966 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636459.028:10531): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636459.028:10532): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636459.039:10533): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636459.039:10534): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636459.040:10535): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=53970 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636459.061:10536): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636459.061:10537): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636459.709:10538): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636459.709:10539): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636459.711:10540): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=53997 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636459.732:10541): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636459.732:10542): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636459.745:10543): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636459.745:10544): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636459.748:10545): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=54011 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636459.777:10546): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636459.777:10547): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636459.796:10548): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636459.796:10549): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636459.798:10550): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=54034 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636459.832:10551): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636459.832:10552): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636459.843:10553): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636459.843:10554): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636459.845:10555): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=54052 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636459.870:10556): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636459.870:10557): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636459.881:10558): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636459.881:10559): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636459.883:10560): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=54067 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636459.942:10561): pid=54082 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636459.942:10562): pid=54082 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7476677776697673647A6A756D776B6D78746D6663656F7572746966707A6864203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363435392E373333373031322D35333939352D3234353336393131353137393931312F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636459.942:10563): pid=54082 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636459.946:10564): pid=54082 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636460.103:10565): pid=54082 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636460.103:10566): pid=54082 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636460.106:10567): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636460.107:10568): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636460.118:10569): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636460.118:10570): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636460.119:10571): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=54092 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636460.139:10572): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636460.139:10573): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636460.482:10574): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636460.482:10575): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636460.484:10576): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=54111 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636460.502:10577): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636460.502:10578): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636460.513:10579): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636460.513:10580): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636460.514:10581): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=54125 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636460.537:10582): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636460.537:10583): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636460.553:10584): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636460.553:10585): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636460.554:10586): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=54146 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636460.586:10587): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636460.586:10588): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636460.598:10589): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636460.598:10590): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636460.599:10591): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=54160 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636460.623:10592): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636460.623:10593): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636460.633:10594): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636460.633:10595): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636460.635:10596): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=54175 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636460.693:10597): pid=54192 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636460.693:10598): pid=54192 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D78616774717A6369617172736F797666646C68647A646A636274657865736169203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363436302E353034363431352D35343130392D3231363634373638393239353832372F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636460.694:10599): pid=54192 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636460.695:10600): pid=54192 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636460.871:10601): pid=54192 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636460.871:10602): pid=54192 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636460.876:10603): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636460.876:10604): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636460.888:10605): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636460.889:10606): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636460.890:10607): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=54200 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636460.920:10608): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636460.920:10609): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636461.292:10610): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636461.292:10611): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636461.293:10612): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=54223 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636461.311:10613): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636461.311:10614): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636461.323:10615): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636461.323:10616): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636461.324:10617): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=54237 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636461.347:10618): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636461.347:10619): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636461.365:10620): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636461.366:10621): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636461.367:10622): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=54258 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636461.402:10623): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636461.402:10624): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636461.416:10625): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636461.416:10626): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636461.417:10627): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=54272 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636461.446:10628): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636461.446:10629): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636461.457:10630): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636461.458:10631): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636461.459:10632): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=54287 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636461.518:10633): pid=54304 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636461.518:10634): pid=54304 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D796A656B6A747A646A766D6B737575697A6F7A6474717970736B786B62667062203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363436312E333133323930362D35343231352D3234323837393638393233323635382F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636461.518:10635): pid=54304 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636461.520:10636): pid=54304 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636461.692:10637): pid=54304 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636461.692:10638): pid=54304 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636461.694:10639): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636461.695:10640): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636461.706:10641): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636461.706:10642): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636461.708:10643): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=54312 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636461.726:10644): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636461.726:10645): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636461.917:10646): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636461.917:10647): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636461.918:10648): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=54328 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636461.936:10649): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636461.937:10650): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636461.946:10651): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636461.946:10652): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636461.947:10653): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=54342 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636461.971:10654): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636461.971:10655): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636461.989:10656): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636461.989:10657): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636461.991:10658): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=54363 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636462.024:10659): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636462.024:10660): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636462.037:10661): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636462.037:10662): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636462.038:10663): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=54377 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636462.055:10664): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636462.055:10665): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636462.067:10666): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636462.067:10667): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636462.068:10668): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=54392 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636462.119:10669): pid=54407 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636462.120:10670): pid=54407 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D677874636D747663686867777374787472717678666B7A7A6D6A6B6B656A7874203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363436312E3933373835312D35343231352D3133353230313334303331383134372F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636462.121:10671): pid=54407 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636462.129:10672): pid=54407 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636462.301:10673): pid=54407 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636462.301:10674): pid=54407 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636462.304:10675): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636462.305:10676): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636462.316:10677): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636462.316:10678): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636462.318:10679): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=54423 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636462.337:10680): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636462.337:10681): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636462.556:10682): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636462.556:10683): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636462.557:10684): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=54438 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636462.578:10685): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636462.578:10686): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636462.589:10687): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636462.589:10688): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636462.593:10689): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=54452 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636462.615:10690): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636462.615:10691): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636462.633:10692): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636462.633:10693): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636462.634:10694): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=54473 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636462.666:10695): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636462.666:10696): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636462.679:10697): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636462.679:10698): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636462.680:10699): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=54487 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636462.699:10700): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636462.699:10701): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636462.711:10702): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636462.711:10703): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636462.712:10704): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=54502 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636462.764:10705): pid=54517 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636462.765:10706): pid=54517 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7371696A666A6968636F6772697478646A656C6D656C64746762636E6B707778203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363436322E3538303535372D35343231352D3139393738303830373631393130392F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636462.765:10707): pid=54517 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636462.767:10708): pid=54517 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636462.947:10709): pid=54517 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636462.948:10710): pid=54517 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636462.950:10711): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636462.951:10712): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636462.963:10713): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636462.963:10714): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636462.964:10715): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=54521 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636462.985:10716): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636462.985:10717): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636463.180:10718): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636463.180:10719): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636463.182:10720): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=54543 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636463.204:10721): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636463.204:10722): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636463.213:10723): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636463.213:10724): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636463.214:10725): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=54557 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636463.245:10726): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636463.245:10727): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636463.261:10728): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636463.261:10729): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636463.262:10730): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=54578 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636463.295:10731): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636463.295:10732): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636463.307:10733): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636463.307:10734): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636463.309:10735): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=54592 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636463.335:10736): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636463.335:10737): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636463.346:10738): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636463.346:10739): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636463.347:10740): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=54607 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636463.403:10741): pid=54622 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636463.403:10742): pid=54622 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7278656B636D6C6C65677567747A6D6E786F6370706278636B616F6261706469203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363436332E323035323030342D35343231352D3134313835393630343530393734352F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636463.403:10743): pid=54622 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636463.405:10744): pid=54622 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636463.569:10745): pid=54622 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636463.569:10746): pid=54622 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636463.572:10747): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636463.572:10748): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636463.585:10749): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636463.585:10750): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636463.587:10751): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=54632 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636463.611:10752): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636463.611:10753): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636463.816:10754): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636463.816:10755): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636463.817:10756): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=54649 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636463.839:10757): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636463.839:10758): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636463.847:10759): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636463.847:10760): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636463.848:10761): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=54667 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636463.873:10762): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636463.873:10763): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636463.891:10764): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636463.891:10765): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636463.892:10766): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=54688 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636463.925:10767): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636463.925:10768): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636463.939:10769): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636463.939:10770): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636463.940:10771): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=54702 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636463.958:10772): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636463.958:10773): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636463.970:10774): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636463.970:10775): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636463.971:10776): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=54717 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636464.021:10777): pid=54732 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636464.021:10778): pid=54732 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6868707A776E6862796E6974797A6F61636E637969686C736A666B6F6667786A203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363436332E3833373439352D35343231352D3237323732333239343132343531392F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636464.022:10779): pid=54732 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636464.023:10780): pid=54732 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636464.191:10781): pid=54732 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636464.192:10782): pid=54732 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636464.194:10783): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636464.195:10784): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636464.206:10785): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636464.207:10786): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636464.208:10787): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=54736 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636464.226:10788): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636464.226:10789): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636464.426:10790): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636464.426:10791): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636464.427:10792): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=54751 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636464.447:10793): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636464.447:10794): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636464.459:10795): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636464.459:10796): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636464.460:10797): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=54765 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636464.495:10798): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636464.495:10799): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636464.512:10800): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636464.512:10801): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636464.514:10802): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=54786 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636464.573:10803): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636464.573:10804): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636464.588:10805): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636464.588:10806): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636464.590:10807): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=54802 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636464.616:10808): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636464.616:10809): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636464.631:10810): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636464.631:10811): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636464.633:10812): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=54821 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636464.715:10813): pid=54836 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636464.715:10814): pid=54836 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D677171706872626376636B6B617378696B7A75706B736F6B6A636A7367676E7A203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363436342E343439353135362D35343231352D3132393230313039333432333733342F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636464.716:10815): pid=54836 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636464.718:10816): pid=54836 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636464.879:10817): pid=54836 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636464.879:10818): pid=54836 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636464.881:10819): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636464.882:10820): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636464.896:10821): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636464.896:10822): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636464.897:10823): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=54846 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636464.916:10824): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636464.916:10825): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636465.146:10826): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636465.147:10827): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636465.148:10828): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=54861 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636465.167:10829): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636465.168:10830): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636465.177:10831): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636465.177:10832): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636465.181:10833): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=54875 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636465.207:10834): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636465.207:10835): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636465.224:10836): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636465.224:10837): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636465.225:10838): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=54896 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636465.262:10839): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636465.262:10840): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636465.274:10841): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636465.274:10842): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636465.275:10843): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=54910 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636465.306:10844): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636465.306:10845): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636465.317:10846): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636465.317:10847): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636465.319:10848): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=54925 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636465.372:10849): pid=54940 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636465.372:10850): pid=54940 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C6272756B6E69657564636E66766B6F696C6E6F7A6977756863637363796C61203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363436352E3136383839372D35343231352D38393538373839353338323538342F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636465.372:10851): pid=54940 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636465.379:10852): pid=54940 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636465.550:10853): pid=54940 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636465.550:10854): pid=54940 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636465.553:10855): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636465.554:10856): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636465.568:10857): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636465.569:10858): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636465.570:10859): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=54950 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636465.589:10860): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636465.589:10861): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636465.800:10862): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636465.800:10863): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636465.801:10864): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=54965 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636465.821:10865): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636465.822:10866): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636465.831:10867): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636465.831:10868): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636465.833:10869): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=54979 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636465.855:10870): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636465.855:10871): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636465.871:10872): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636465.871:10873): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636465.872:10874): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=55000 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636465.907:10875): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636465.907:10876): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636465.919:10877): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636465.919:10878): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636465.920:10879): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=55014 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636465.948:10880): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636465.948:10881): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636465.961:10882): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636465.961:10883): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636465.963:10884): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=55029 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636466.024:10885): pid=55044 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636466.024:10886): pid=55044 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D68786C726D6F627978776568747378736463767076786B746E6F70776A696B67203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363436352E383232393039362D35343231352D353532323234383930393436312F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636466.025:10887): pid=55044 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636466.026:10888): pid=55044 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636466.209:10889): pid=55044 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636466.210:10890): pid=55044 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636466.212:10891): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636466.213:10892): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636466.226:10893): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636466.226:10894): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636466.227:10895): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=55056 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636466.249:10896): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636466.249:10897): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636466.448:10898): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636466.448:10899): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636466.449:10900): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=55075 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636466.468:10901): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636466.468:10902): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636466.479:10903): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636466.479:10904): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636466.480:10905): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=55089 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636466.502:10906): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636466.502:10907): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636466.518:10908): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636466.518:10909): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636466.519:10910): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=55110 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636466.551:10911): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636466.551:10912): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636466.565:10913): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636466.565:10914): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636466.566:10915): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=55124 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636466.585:10916): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636466.586:10917): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636466.597:10918): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636466.597:10919): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636466.598:10920): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=55139 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636466.648:10921): pid=55154 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636466.648:10922): pid=55154 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D6166657A63797174676F626A78767A6675787679676678797065797A626C6A203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363436362E343730313337342D35343231352D3136373339343833333138313831362F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636466.649:10923): pid=55154 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636466.650:10924): pid=55154 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636466.816:10925): pid=55154 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636466.816:10926): pid=55154 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636466.819:10927): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636466.819:10928): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636466.831:10929): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636466.831:10930): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636466.832:10931): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=55159 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636466.852:10932): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636466.852:10933): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636467.070:10934): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636467.070:10935): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636467.074:10936): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=55180 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636467.101:10937): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636467.101:10938): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636467.112:10939): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636467.112:10940): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636467.113:10941): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=55196 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636467.139:10942): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636467.139:10943): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636467.155:10944): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636467.155:10945): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636467.156:10946): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=55217 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636467.189:10947): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636467.189:10948): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636467.201:10949): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636467.201:10950): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636467.202:10951): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=55231 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636467.220:10952): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636467.221:10953): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636467.233:10954): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636467.233:10955): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636467.235:10956): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=55246 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636467.303:10957): pid=55261 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636467.303:10958): pid=55261 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D656666736B6367757A6278766F7468646278627664677A79686C6C6167657461203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363436372E313033363538372D35343231352D383230303131303634323532342F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636467.303:10959): pid=55261 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636467.305:10960): pid=55261 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636467.471:10961): pid=55261 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636467.471:10962): pid=55261 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636467.474:10963): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636467.475:10964): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636467.486:10965): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636467.486:10966): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636467.487:10967): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=55271 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636467.507:10968): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636467.507:10969): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636467.729:10970): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636467.729:10971): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636467.731:10972): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=55286 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636467.749:10973): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636467.749:10974): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636467.763:10975): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636467.763:10976): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636467.767:10977): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=55300 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636467.793:10978): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636467.793:10979): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636467.809:10980): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636467.809:10981): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636467.813:10982): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=55321 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636467.855:10983): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636467.855:10984): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636467.869:10985): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636467.869:10986): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636467.870:10987): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=55341 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636467.903:10988): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636467.903:10989): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636467.916:10990): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636467.916:10991): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636467.917:10992): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=55356 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636467.975:10993): pid=55371 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636467.975:10994): pid=55371 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D736A667479746B637278686D70736465676E6371616366676F75636368676464203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363436372E373532323637342D35343231352D34333037383937383133323730342F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636467.976:10995): pid=55371 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636467.977:10996): pid=55371 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636468.164:10997): pid=55371 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636468.164:10998): pid=55371 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636468.167:10999): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636468.167:11000): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636468.181:11001): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636468.181:11002): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636468.183:11003): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=55375 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636468.201:11004): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636468.201:11005): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636468.417:11006): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636468.417:11007): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636468.421:11008): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=55390 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636468.439:11009): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636468.439:11010): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636468.451:11011): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636468.451:11012): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636468.452:11013): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=55404 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636468.488:11014): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636468.488:11015): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636468.505:11016): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636468.505:11017): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636468.508:11018): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=55425 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636468.548:11019): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636468.550:11020): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636468.562:11021): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636468.562:11022): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636468.567:11023): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=55439 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636468.589:11024): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636468.589:11025): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636468.599:11026): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636468.599:11027): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636468.600:11028): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=55456 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636468.654:11029): pid=55475 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636468.654:11030): pid=55475 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D676575786966656B6B736163757A666D7872626E7861646F77756E647A617763203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363436382E343430353536352D35343231352D3230323230333830373939343834372F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636468.655:11031): pid=55475 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636468.656:11032): pid=55475 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636468.830:11033): pid=55475 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636468.830:11034): pid=55475 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636468.833:11035): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636468.833:11036): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636468.845:11037): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636468.845:11038): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636468.846:11039): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=55485 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636468.866:11040): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636468.866:11041): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636469.133:11042): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636469.133:11043): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636469.134:11044): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=55500 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636469.156:11045): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636469.156:11046): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636469.166:11047): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636469.166:11048): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636469.167:11049): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=55514 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636469.193:11050): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636469.193:11051): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636469.209:11052): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636469.209:11053): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636469.210:11054): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=55535 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636469.242:11055): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636469.242:11056): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636469.259:11057): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636469.259:11058): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636469.260:11059): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=55549 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636469.286:11060): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636469.286:11061): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636469.301:11062): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636469.301:11063): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636469.303:11064): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=55564 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636469.361:11065): pid=55579 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636469.361:11066): pid=55579 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D75646E6C637574716D776269676F6679746F61767172786870746B6B76616B6E203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363436392E313537353734372D35343231352D31373738313936333932303139362F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636469.362:11067): pid=55579 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636469.363:11068): pid=55579 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636469.532:11069): pid=55579 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636469.532:11070): pid=55579 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636469.534:11071): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636469.536:11072): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636469.547:11073): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636469.547:11074): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636469.548:11075): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=55589 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636469.568:11076): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636469.568:11077): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636469.772:11078): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636469.772:11079): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636469.774:11080): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=55604 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636469.795:11081): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636469.796:11082): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636469.806:11083): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636469.806:11084): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636469.808:11085): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=55618 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636469.834:11086): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636469.834:11087): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636469.856:11088): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636469.856:11089): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636469.857:11090): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=55639 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636469.897:11091): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636469.897:11092): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636469.911:11093): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636469.911:11094): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636469.912:11095): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=55653 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636469.937:11096): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636469.938:11097): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636469.952:11098): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636469.952:11099): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636469.953:11100): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=55668 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636470.012:11101): pid=55683 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636470.012:11102): pid=55683 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D646561666579736561616973696D6479766D676467736A7A627A6E7875647971203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363436392E373936393638372D35343231352D3137323339393332333139313739362F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636470.012:11103): pid=55683 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636470.014:11104): pid=55683 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636470.206:11105): pid=55683 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636470.207:11106): pid=55683 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636470.209:11107): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636470.209:11108): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636470.222:11109): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636470.222:11110): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636470.223:11111): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=55693 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636470.251:11112): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636470.251:11113): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636470.458:11114): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636470.458:11115): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636470.461:11116): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=55714 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636470.483:11117): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636470.483:11118): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636470.497:11119): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636470.497:11120): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636470.499:11121): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=55728 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636470.525:11122): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636470.525:11123): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636470.543:11124): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636470.543:11125): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636470.544:11126): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=55749 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636470.577:11127): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636470.577:11128): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636470.590:11129): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636470.590:11130): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636470.591:11131): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=55763 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636470.611:11132): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636470.611:11133): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636470.627:11134): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636470.627:11135): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636470.628:11136): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=55778 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636470.677:11137): pid=55793 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636470.678:11138): pid=55793 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A637469636662626D72617964637479726F6862686E74727861636B68706877203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363437302E3438353237312D35343231352D3137393934373934313035363232332F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636470.678:11139): pid=55793 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636470.679:11140): pid=55793 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636470.847:11141): pid=55793 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636470.848:11142): pid=55793 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636470.850:11143): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636470.851:11144): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636470.863:11145): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636470.863:11146): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636470.864:11147): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=55797 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636470.886:11148): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636470.886:11149): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636471.123:11150): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636471.123:11151): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636471.124:11152): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=55812 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636471.152:11153): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636471.152:11154): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636471.164:11155): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636471.164:11156): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636471.165:11157): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=55826 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636471.199:11158): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636471.199:11159): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636471.221:11160): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636471.221:11161): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636471.222:11162): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=55849 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636471.261:11163): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636471.261:11164): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636471.273:11165): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636471.274:11166): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636471.275:11167): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=55867 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636471.304:11168): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636471.304:11169): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636471.312:11170): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636471.312:11171): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636471.313:11172): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=55882 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636471.379:11173): pid=55897 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636471.379:11174): pid=55897 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D797067626E616C717061756270666878676F6A677775726A626A707566726261203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363437312E313533383733372D35343231352D39373832323434343232323337382F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636471.380:11175): pid=55897 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636471.382:11176): pid=55897 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636471.571:11177): pid=55897 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636471.572:11178): pid=55897 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636471.574:11179): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636471.576:11180): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636471.587:11181): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636471.587:11182): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636471.589:11183): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=55907 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636471.611:11184): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636471.611:11185): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636471.824:11186): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636471.824:11187): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636471.825:11188): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=55922 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636471.844:11189): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636471.844:11190): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636471.855:11191): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636471.855:11192): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636471.856:11193): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=55936 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636471.877:11194): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636471.877:11195): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636471.896:11196): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636471.896:11197): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636471.897:11198): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=55957 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636471.929:11199): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636471.929:11200): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636471.943:11201): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636471.943:11202): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636471.944:11203): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=55971 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636471.964:11204): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636471.964:11205): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636471.976:11206): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636471.977:11207): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636471.978:11208): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=55986 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636472.039:11209): pid=56001 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636472.039:11210): pid=56001 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D77697A6F7463666F7075646C6C747A75776579647174766F686F77676863706C203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363437312E3834353737392D35343231352D3132313237333232333736313339312F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636472.040:11211): pid=56001 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636472.043:11212): pid=56001 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636472.266:11213): pid=56001 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636472.267:11214): pid=56001 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636472.272:11215): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636472.272:11216): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636472.285:11217): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636472.286:11218): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636472.287:11219): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=56029 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636472.310:11220): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636472.310:11221): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636472.521:11222): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636472.521:11223): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636472.522:11224): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=56046 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636472.554:11225): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636472.554:11226): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636472.568:11227): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636472.568:11228): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636472.569:11229): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=56060 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636472.619:11230): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636472.619:11231): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636472.635:11232): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636472.635:11233): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636472.641:11234): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=56096 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636472.699:11235): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636472.700:11236): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636472.712:11237): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636472.712:11238): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636472.713:11239): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=56111 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636472.743:11240): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636472.743:11241): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636472.762:11242): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636472.762:11243): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636472.763:11244): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=56126 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636472.836:11245): pid=56157 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636472.836:11246): pid=56157 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D757A756F64617673776A7569676E79697576616F71697366726E757265797A6A203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363437322E353536343835342D35343231352D3139363534323137393335393732362F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636472.837:11247): pid=56157 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636472.839:11248): pid=56157 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636473.010:11249): pid=56157 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636473.010:11250): pid=56157 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636473.014:11251): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636473.015:11252): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636473.032:11253): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636473.032:11254): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636473.034:11255): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=56167 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636473.056:11256): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636473.056:11257): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636473.325:11258): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636473.325:11259): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636473.327:11260): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=56218 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636473.368:11261): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636473.368:11262): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636473.380:11263): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636473.383:11264): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636473.384:11265): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=56232 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636473.431:11266): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636473.431:11267): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636473.447:11268): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636473.447:11269): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636473.448:11270): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=56253 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636473.518:11271): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636473.519:11272): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636473.545:11273): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636473.545:11274): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636473.547:11275): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=56270 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636473.589:11276): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636473.589:11277): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636473.600:11278): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636473.600:11279): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636473.604:11280): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=56285 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636473.682:11281): pid=56300 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636473.682:11282): pid=56300 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D76616266776A796F6B746F737373726D64776466706E6770696B6D75736A6A75203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363437332E3337313232392D35343231352D3237373335303330383434313236322F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636473.683:11283): pid=56300 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636473.686:11284): pid=56300 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636473.914:11285): pid=56300 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636473.915:11286): pid=56300 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636473.917:11287): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636473.917:11288): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636473.931:11289): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636473.931:11290): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636473.934:11291): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=56306 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636473.961:11292): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636473.961:11293): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636474.195:11294): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636474.195:11295): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636474.197:11296): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=56348 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636474.221:11297): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636474.221:11298): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636474.232:11299): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636474.232:11300): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636474.233:11301): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=56364 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636474.267:11302): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636474.267:11303): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636474.283:11304): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636474.283:11305): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636474.286:11306): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=56398 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636474.322:11307): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636474.323:11308): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636474.336:11309): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636474.336:11310): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636474.336:11311): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=56445 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636474.371:11312): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636474.371:11313): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636474.384:11314): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636474.384:11315): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636474.385:11316): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=56469 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636474.444:11317): pid=56487 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636474.444:11318): pid=56487 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D63737978616770716F6C636C616C71716E66756C746D6A6A666A766C65667272203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363437342E323232393635352D35343231352D3231323131383235373832353332372F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636474.445:11319): pid=56487 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636474.446:11320): pid=56487 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636474.845:11321): pid=56487 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636474.845:11322): pid=56487 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636474.848:11323): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636474.848:11324): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636474.859:11325): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636474.859:11326): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636474.860:11327): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=56503 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636474.900:11328): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636474.900:11329): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636475.108:11330): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636475.108:11331): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636475.110:11332): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=56518 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636475.142:11333): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636475.142:11334): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636475.163:11335): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636475.163:11336): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636475.164:11337): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=56532 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636475.198:11338): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636475.198:11339): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636475.214:11340): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636475.214:11341): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636475.217:11342): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=56553 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636475.259:11343): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636475.259:11344): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636475.281:11345): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636475.281:11346): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636475.283:11347): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=56567 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636475.309:11348): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636475.309:11349): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636475.319:11350): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636475.319:11351): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636475.321:11352): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=56584 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636475.419:11353): pid=56599 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636475.420:11354): pid=56599 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D746C64697768616A6D64627A6D6379616D636A79706A6D6B62786A6870636C64203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363437352E313433363532322D35343231352D3133323938373433353235323438382F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636475.420:11355): pid=56599 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636475.422:11356): pid=56599 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636475.612:11357): pid=56599 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636475.612:11358): pid=56599 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636475.616:11359): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636475.616:11360): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636475.629:11361): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636475.629:11362): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636475.632:11363): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=56607 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636475.664:11364): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636475.664:11365): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636475.916:11366): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636475.917:11367): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636475.918:11368): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=56622 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636475.937:11369): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636475.937:11370): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636475.951:11371): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636475.951:11372): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636475.952:11373): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=56636 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636475.991:11374): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636475.991:11375): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636476.011:11376): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636476.011:11377): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636476.012:11378): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=56659 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636476.078:11379): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636476.078:11380): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636476.089:11381): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636476.089:11382): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636476.091:11383): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=56681 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636476.111:11384): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636476.111:11385): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636476.122:11386): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636476.122:11387): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636476.126:11388): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=56696 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636476.191:11389): pid=56712 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636476.191:11390): pid=56712 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B7A6578676D63647372757A737A6D6E7566726D706564786E6E767364756A66203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363437352E393339313030352D35343231352D3136323034333030323030343530382F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636476.192:11391): pid=56712 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636476.193:11392): pid=56712 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636476.353:11393): pid=56712 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636476.353:11394): pid=56712 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636476.357:11395): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636476.357:11396): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636476.368:11397): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636476.368:11398): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636476.369:11399): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=56719 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636476.388:11400): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636476.388:11401): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636476.587:11402): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636476.587:11403): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636476.589:11404): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=56738 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636476.609:11405): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636476.609:11406): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636476.618:11407): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636476.618:11408): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636476.619:11409): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=56752 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636476.643:11410): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636476.643:11411): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636476.659:11412): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636476.659:11413): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636476.660:11414): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=56773 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636476.694:11415): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636476.694:11416): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636476.710:11417): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636476.710:11418): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636476.711:11419): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=56787 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636476.734:11420): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636476.734:11421): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636476.747:11422): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636476.747:11423): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636476.748:11424): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=56802 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636476.799:11425): pid=56817 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636476.799:11426): pid=56817 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D786A7A6473776D667161746679696961747061756E6268757779676A77736162203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363437362E3630383634352D35343231352D3235323531303730373931333534322F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636476.800:11427): pid=56817 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636476.802:11428): pid=56817 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636476.969:11429): pid=56817 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636476.969:11430): pid=56817 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636476.973:11431): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636476.974:11432): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636476.985:11433): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636476.985:11434): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636476.986:11435): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=56821 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636477.005:11436): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636477.005:11437): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636477.236:11438): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636477.236:11439): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636477.237:11440): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=56842 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636477.255:11441): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636477.255:11442): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636477.267:11443): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636477.267:11444): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636477.268:11445): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=56860 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636477.298:11446): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636477.298:11447): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636477.314:11448): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636477.314:11449): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636477.315:11450): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=56885 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636477.347:11451): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636477.347:11452): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636477.359:11453): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636477.359:11454): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636477.360:11455): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=56899 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636477.383:11456): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636477.384:11457): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636477.396:11458): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636477.396:11459): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636477.397:11460): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=56914 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636477.456:11461): pid=56929 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636477.456:11462): pid=56929 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F726A7667767767786E756C73786E616B736E627663647965766E68786A636A203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363437372E323536383331342D35343231352D32323134383936343231363036352F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636477.456:11463): pid=56929 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636477.458:11464): pid=56929 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636477.651:11465): pid=56929 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636477.652:11466): pid=56929 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636477.654:11467): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636477.656:11468): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636477.669:11469): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636477.669:11470): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636477.670:11471): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=56934 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636477.690:11472): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636477.690:11473): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636477.925:11474): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636477.925:11475): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636477.926:11476): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=56950 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636477.948:11477): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636477.948:11478): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636477.960:11479): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636477.960:11480): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636477.963:11481): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=56965 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636477.988:11482): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636477.988:11483): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636478.003:11484): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636478.003:11485): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636478.005:11486): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=56990 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636478.038:11487): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636478.038:11488): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636478.050:11489): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636478.050:11490): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636478.052:11491): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=57004 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636478.071:11492): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636478.072:11493): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636478.084:11494): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636478.085:11495): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636478.086:11496): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=57019 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636478.148:11497): pid=57034 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636478.148:11498): pid=57034 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7161696A746E6D786B6F616D7A6C746C676D75686469786A6C66796177647163203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363437372E39353037362D35343231352D3232353034343531383936343538352F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636478.149:11499): pid=57034 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636478.151:11500): pid=57034 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636478.320:11501): pid=57034 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636478.320:11502): pid=57034 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636478.323:11503): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636478.324:11504): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636478.336:11505): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636478.336:11506): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636478.337:11507): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=57038 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636478.356:11508): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636478.356:11509): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636478.556:11510): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636478.556:11511): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636478.557:11512): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=57055 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636478.575:11513): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636478.576:11514): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636478.587:11515): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636478.587:11516): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636478.588:11517): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=57069 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636478.610:11518): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636478.610:11519): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636478.625:11520): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636478.625:11521): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636478.626:11522): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=57094 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636478.662:11523): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636478.662:11524): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636478.674:11525): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636478.674:11526): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636478.675:11527): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=57108 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636478.697:11528): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636478.697:11529): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636478.709:11530): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636478.709:11531): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636478.710:11532): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=57123 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636478.765:11533): pid=57138 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636478.765:11534): pid=57138 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D68627878726A73636278716B726F6F706B75746177726B6369736B6977766170203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363437382E353737373234372D35343231352D3139373934383332383435393138312F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636478.766:11535): pid=57138 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636478.768:11536): pid=57138 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636478.940:11537): pid=57138 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636478.940:11538): pid=57138 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636478.942:11539): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636478.943:11540): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636478.955:11541): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636478.956:11542): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636478.957:11543): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=57148 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636478.975:11544): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636478.975:11545): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636479.186:11546): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636479.186:11547): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636479.187:11548): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=57163 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636479.210:11549): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636479.210:11550): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636479.220:11551): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636479.220:11552): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636479.221:11553): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=57177 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636479.246:11554): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636479.246:11555): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636479.262:11556): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636479.263:11557): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636479.264:11558): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=57198 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636479.299:11559): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636479.299:11560): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636479.310:11561): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636479.310:11562): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636479.314:11563): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=57212 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636479.336:11564): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636479.336:11565): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636479.350:11566): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636479.350:11567): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636479.351:11568): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=57227 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636479.412:11569): pid=57242 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636479.413:11570): pid=57242 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D65787A6D737574747A6C76696B6765627874696E7A69726C736D7A7965787062203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363437392E323130393736382D35343231352D3236313336313136383338303632392F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636479.413:11571): pid=57242 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636479.415:11572): pid=57242 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636479.596:11573): pid=57242 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636479.597:11574): pid=57242 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636479.599:11575): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636479.600:11576): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636479.612:11577): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636479.612:11578): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636479.614:11579): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=57248 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636479.634:11580): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636479.635:11581): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636479.835:11582): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636479.835:11583): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636479.836:11584): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=57273 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636479.855:11585): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636479.855:11586): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636479.866:11587): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636479.866:11588): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636479.868:11589): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=57287 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636479.893:11590): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636479.893:11591): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636479.910:11592): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636479.910:11593): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636479.911:11594): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=57308 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636479.944:11595): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636479.944:11596): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636479.957:11597): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636479.957:11598): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636479.958:11599): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=57322 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636479.976:11600): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636479.976:11601): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636479.990:11602): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636479.990:11603): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636479.993:11604): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=57337 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636480.044:11605): pid=57352 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636480.044:11606): pid=57352 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7366696A696D6C7475686577646F7879746D6F6F617161666C6D757579776461203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363437392E383537333531352D35343231352D3233353636363532343131393034312F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636480.044:11607): pid=57352 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636480.046:11608): pid=57352 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636480.207:11609): pid=57352 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636480.208:11610): pid=57352 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636480.210:11611): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636480.212:11612): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636480.223:11613): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636480.223:11614): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636480.224:11615): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=57356 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636480.243:11616): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636480.243:11617): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636480.456:11618): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636480.456:11619): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636480.457:11620): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=57377 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636480.478:11621): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636480.478:11622): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636480.488:11623): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636480.488:11624): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636480.489:11625): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=57391 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636480.510:11626): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636480.514:11627): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636480.525:11628): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636480.525:11629): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636480.526:11630): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=57412 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636480.554:11631): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636480.554:11632): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636480.566:11633): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636480.566:11634): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636480.567:11635): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=57426 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636480.585:11636): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636480.585:11637): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636480.597:11638): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636480.597:11639): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636480.598:11640): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=57441 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636480.650:11641): pid=57456 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636480.650:11642): pid=57456 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D707A74767767686679666A6E656671736878796869696A71736361686C637768203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363438302E3437393031312D35343231352D39383533383832363039333736372F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636480.651:11643): pid=57456 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636480.652:11644): pid=57456 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636480.837:11645): pid=57456 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636480.837:11646): pid=57456 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636480.839:11647): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636480.840:11648): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636480.854:11649): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636480.855:11650): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636480.856:11651): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=57460 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636480.875:11652): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636480.875:11653): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636481.116:11654): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636481.116:11655): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636481.118:11656): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=57481 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636481.142:11657): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636481.143:11658): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636481.157:11659): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636481.157:11660): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636481.158:11661): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=57495 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636481.182:11662): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636481.182:11663): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636481.199:11664): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636481.199:11665): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636481.200:11666): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=57518 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636481.233:11667): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636481.233:11668): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636481.245:11669): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636481.245:11670): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636481.246:11671): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=57536 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636481.266:11672): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636481.266:11673): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636481.278:11674): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636481.278:11675): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636481.282:11676): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=57551 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636481.336:11677): pid=57566 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636481.336:11678): pid=57566 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C6E70717A6E7677796E737964746B68757778746F776275786A776D6C76746B203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363438312E313434333937372D35343231352D3135313331393833353735363333352F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636481.337:11679): pid=57566 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636481.339:11680): pid=57566 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636481.532:11681): pid=57566 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636481.533:11682): pid=57566 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636481.535:11683): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636481.536:11684): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636481.550:11685): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636481.550:11686): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636481.552:11687): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=57570 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636481.574:11688): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636481.575:11689): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636482.112:11690): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636482.112:11691): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636482.113:11692): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=57596 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636482.135:11693): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636482.135:11694): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636482.146:11695): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636482.146:11696): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636482.150:11697): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=57610 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636482.179:11698): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636482.181:11699): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636482.306:11700): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636482.307:11701): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636482.309:11702): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=57633 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636482.343:11703): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636482.343:11704): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636482.356:11705): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636482.356:11706): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636482.357:11707): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=57651 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636482.378:11708): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636482.378:11709): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636482.390:11710): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636482.390:11711): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636482.392:11712): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=57666 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636482.447:11713): pid=57681 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636482.447:11714): pid=57681 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D68666C657161777679626D6165647170617978786C6E6E75777571766B686974203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363438322E313336363933372D35373538382D3130313834393632353231393735342F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636482.448:11715): pid=57681 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636482.449:11716): pid=57681 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636482.627:11717): pid=57681 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636482.627:11718): pid=57681 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636482.630:11719): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636482.630:11720): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636482.647:11721): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636482.647:11722): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636482.649:11723): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=57686 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636482.670:11724): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636482.671:11725): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636482.684:11726): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636482.684:11727): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636482.685:11728): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=57700 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636482.707:11729): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636482.707:11730): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636482.724:11731): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636482.724:11732): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636482.725:11733): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=57716 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636482.763:11734): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636482.763:11735): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636482.775:11736): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636482.775:11737): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636482.776:11738): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=57732 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636482.797:11739): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636482.797:11740): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636482.809:11741): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636482.809:11742): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636482.810:11743): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=57747 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636482.862:11744): pid=57766 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636482.862:11745): pid=57766 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D636C616E616470686176797071676768727478697673727565736A7078667A72203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363438322E313336363933372D35373538382D3130313834393632353231393735342F416E736962616C6C5A5F636F70792E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636482.862:11746): pid=57766 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636482.864:11747): pid=57766 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636483.035:11748): pid=57766 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636483.035:11749): pid=57766 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636483.038:11750): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636483.038:11751): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636483.052:11752): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636483.052:11753): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636483.053:11754): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=57770 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636483.071:11755): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636483.071:11756): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636483.312:11757): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636483.312:11758): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636483.313:11759): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=57787 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636483.330:11760): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636483.330:11761): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636483.341:11762): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636483.341:11763): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636483.342:11764): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=57801 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636483.364:11765): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636483.364:11766): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636483.380:11767): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636483.381:11768): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636483.382:11769): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=57822 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636483.416:11770): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636483.416:11771): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636483.429:11772): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636483.430:11773): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636483.431:11774): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=57836 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636483.454:11775): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636483.454:11776): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636483.465:11777): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636483.465:11778): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636483.466:11779): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=57851 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636483.527:11780): pid=57868 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636483.528:11781): pid=57868 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd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exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636483.528:11782): pid=57868 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636483.531:11783): pid=57868 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=BPF msg=audit(1744636484.284:11784): prog-id=389 op=LOAD type=SYSCALL msg=audit(1744636484.284:11784): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001c7c48 a2=90 a3=0 items=0 ppid=57917 pid=57928 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636484.284:11784): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61363266393733393438326265633536636432323062633366 type=BPF msg=audit(1744636484.284:11785): prog-id=390 op=LOAD type=SYSCALL msg=audit(1744636484.284:11785): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c0001c79d8 a2=90 a3=0 items=0 ppid=57917 pid=57928 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636484.284:11785): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61363266393733393438326265633536636432323062633366 type=BPF msg=audit(1744636484.284:11786): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636484.284:11787): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636484.284:11788): prog-id=391 op=LOAD type=SYSCALL msg=audit(1744636484.284:11788): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001c7eb0 a2=90 a3=0 items=0 ppid=57917 pid=57928 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636484.284:11788): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61363266393733393438326265633536636432323062633366 type=BPF msg=audit(1744636484.350:11789): prog-id=392 op=LOAD type=BPF msg=audit(1744636484.351:11790): prog-id=393 op=LOAD type=SYSCALL msg=audit(1744636484.351:11790): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001b7ad0 a2=90 a3=0 items=0 ppid=57957 pid=57969 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636484.351:11790): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63373639333235306534633265396131303264303265623038 type=BPF msg=audit(1744636484.351:11791): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636484.351:11792): prog-id=394 op=LOAD type=SYSCALL msg=audit(1744636484.351:11792): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001b7c48 a2=90 a3=0 items=0 ppid=57957 pid=57969 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636484.351:11792): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63373639333235306534633265396131303264303265623038 type=BPF msg=audit(1744636484.352:11793): prog-id=395 op=LOAD type=SYSCALL msg=audit(1744636484.352:11793): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001b79d8 a2=90 a3=0 items=0 ppid=57957 pid=57969 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636484.352:11793): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63373639333235306534633265396131303264303265623038 type=BPF msg=audit(1744636484.352:11794): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636484.352:11795): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636484.352:11796): prog-id=396 op=LOAD type=SYSCALL msg=audit(1744636484.352:11796): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001b7eb0 a2=90 a3=0 items=0 ppid=57957 pid=57969 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636484.352:11796): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63373639333235306534633265396131303264303265623038 type=BPF msg=audit(1744636484.744:11797): prog-id=397 op=LOAD type=BPF msg=audit(1744636484.756:11798): prog-id=398 op=LOAD type=SYSCALL msg=audit(1744636484.756:11798): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00019bad0 a2=90 a3=0 items=0 ppid=58160 pid=58202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636484.756:11798): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37383038316363656364303132653937626231363139666162 type=BPF msg=audit(1744636484.756:11799): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636484.756:11800): prog-id=399 op=LOAD type=SYSCALL msg=audit(1744636484.756:11800): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00019bc48 a2=90 a3=0 items=0 ppid=58160 pid=58202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636484.756:11800): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37383038316363656364303132653937626231363139666162 type=BPF msg=audit(1744636484.756:11801): prog-id=400 op=LOAD type=SYSCALL msg=audit(1744636484.756:11801): arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=c00019b9d8 a2=90 a3=0 items=0 ppid=58160 pid=58202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636484.756:11801): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37383038316363656364303132653937626231363139666162 type=BPF msg=audit(1744636484.756:11802): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636484.756:11803): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636484.756:11804): prog-id=401 op=LOAD type=SYSCALL msg=audit(1744636484.756:11804): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00019beb0 a2=90 a3=0 items=0 ppid=58160 pid=58202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636484.756:11804): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37383038316363656364303132653937626231363139666162 type=BPF msg=audit(1744636484.782:11805): prog-id=402 op=LOAD type=BPF msg=audit(1744636484.782:11806): prog-id=403 op=LOAD type=SYSCALL msg=audit(1744636484.782:11806): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001a3ad0 a2=90 a3=0 items=0 ppid=58209 pid=58256 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636484.782:11806): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32363831316364363538326665323631363930363236303231 type=BPF msg=audit(1744636484.786:11807): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636484.786:11808): prog-id=404 op=LOAD type=SYSCALL msg=audit(1744636484.786:11808): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001a3c48 a2=90 a3=0 items=0 ppid=58209 pid=58256 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636484.786:11808): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32363831316364363538326665323631363930363236303231 type=BPF msg=audit(1744636484.786:11809): prog-id=405 op=LOAD type=SYSCALL msg=audit(1744636484.786:11809): arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=c0001a39d8 a2=90 a3=0 items=0 ppid=58209 pid=58256 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636484.786:11809): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32363831316364363538326665323631363930363236303231 type=BPF msg=audit(1744636484.786:11810): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636484.786:11811): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636484.786:11812): prog-id=406 op=LOAD type=SYSCALL msg=audit(1744636484.786:11812): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001a3eb0 a2=90 a3=0 items=0 ppid=58209 pid=58256 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636484.786:11812): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32363831316364363538326665323631363930363236303231 type=BPF msg=audit(1744636484.816:11813): prog-id=407 op=LOAD type=BPF msg=audit(1744636484.820:11814): prog-id=408 op=LOAD type=SYSCALL msg=audit(1744636484.820:11814): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001c1ad0 a2=90 a3=0 items=0 ppid=58218 pid=58280 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636484.820:11814): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30346362623936666136373730353638373231383435393133 type=BPF msg=audit(1744636484.820:11815): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636484.821:11816): prog-id=409 op=LOAD type=SYSCALL msg=audit(1744636484.821:11816): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001c1c48 a2=90 a3=0 items=0 ppid=58218 pid=58280 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636484.821:11816): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30346362623936666136373730353638373231383435393133 type=BPF msg=audit(1744636484.821:11817): prog-id=410 op=LOAD type=SYSCALL msg=audit(1744636484.821:11817): arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=c0001c19d8 a2=90 a3=0 items=0 ppid=58218 pid=58280 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636484.821:11817): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30346362623936666136373730353638373231383435393133 type=BPF msg=audit(1744636484.821:11818): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636484.822:11819): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636484.822:11820): prog-id=411 op=LOAD type=SYSCALL msg=audit(1744636484.822:11820): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001c1eb0 a2=90 a3=0 items=0 ppid=58218 pid=58280 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636484.822:11820): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30346362623936666136373730353638373231383435393133 type=USER_END msg=audit(1744636485.120:11821): pid=57868 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636485.120:11822): pid=57868 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636485.124:11823): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636485.125:11824): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636485.136:11825): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636485.136:11826): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636485.138:11827): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=58734 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636485.163:11828): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636485.166:11829): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=BPF msg=audit(1744636485.270:11830): prog-id=0 op=UNLOAD type=USER_LOGIN msg=audit(1744636485.788:11831): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636485.788:11832): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636485.789:11833): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=59073 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636485.823:11834): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636485.823:11835): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636485.832:11836): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636485.832:11837): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636485.834:11838): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=59089 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636485.869:11839): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636485.869:11840): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636485.887:11841): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636485.887:11842): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636485.891:11843): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=59119 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636485.937:11844): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636485.937:11845): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636485.955:11846): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636485.955:11847): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636485.957:11848): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=59138 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636485.989:11849): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636485.989:11850): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636486.002:11851): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636486.002:11852): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636486.004:11853): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=59160 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636486.079:11854): pid=59175 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636486.079:11855): pid=59175 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D7973676F6376616B6F7063656B7273756D67716E6D67786A6F66787A6C7077203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363438352E3832323033362D35383932342D3138393830343938383232323239322F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636486.079:11856): pid=59175 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636486.081:11857): pid=59175 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636486.478:11858): pid=59175 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636486.479:11859): pid=59175 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636486.482:11860): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636486.482:11861): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636486.493:11862): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636486.493:11863): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636486.494:11864): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=59191 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636486.515:11865): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636486.515:11866): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636486.778:11867): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636486.778:11868): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636486.779:11869): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=59217 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636486.810:11870): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636486.810:11871): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636486.824:11872): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636486.824:11873): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636486.825:11874): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=59231 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636486.864:11875): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636486.864:11876): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636486.880:11877): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636486.883:11878): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636486.884:11879): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=59252 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636486.927:11880): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636486.927:11881): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636486.939:11882): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636486.939:11883): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636486.941:11884): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=59266 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636486.978:11885): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636486.978:11886): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636486.990:11887): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636486.990:11888): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636486.991:11889): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=59281 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636487.073:11890): pid=59297 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636487.073:11891): pid=59297 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7064707369657A6774736562746964666475776A6C6575696E6B6D756F756178203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363438362E383132373030332D35383932342D32323233363237353330373331312F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636487.073:11892): pid=59297 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636487.077:11893): pid=59297 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636487.486:11894): pid=59297 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636487.487:11895): pid=59297 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636487.489:11896): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636487.489:11897): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636487.503:11898): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636487.503:11899): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636487.504:11900): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=59315 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636487.530:11901): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636487.530:11902): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636487.769:11903): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636487.769:11904): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636487.773:11905): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=59336 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636487.795:11906): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636487.795:11907): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636487.802:11908): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636487.802:11909): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636487.808:11910): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=59350 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636487.828:11911): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636487.828:11912): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636487.851:11913): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636487.851:11914): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636487.853:11915): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=59375 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636487.905:11916): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636487.905:11917): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636487.916:11918): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636487.917:11919): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636487.918:11920): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=59389 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636487.949:11921): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636487.949:11922): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636487.961:11923): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636487.961:11924): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636487.962:11925): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=59404 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636488.037:11926): pid=59419 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636488.038:11927): pid=59419 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D75716777666464786772626C6A62786C786F6B716A62646F75716A6475797579203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363438372E3739343230332D35383932342D36313637363738313338333134312F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636488.038:11928): pid=59419 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636488.040:11929): pid=59419 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636494.653:11930): pid=59419 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636494.653:11931): pid=59419 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636494.656:11932): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636494.656:11933): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636494.668:11934): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636494.668:11935): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636494.671:11936): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=59714 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636494.700:11937): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636494.700:11938): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636494.977:11939): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636494.977:11940): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636494.979:11941): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=59729 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636495.006:11942): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636495.007:11943): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636495.021:11944): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636495.021:11945): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636495.022:11946): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=59743 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636495.072:11947): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636495.072:11948): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636495.088:11949): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636495.088:11950): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636495.090:11951): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=59764 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636495.148:11952): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636495.148:11953): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636495.165:11954): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636495.165:11955): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636495.167:11956): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=59780 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636495.192:11957): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636495.192:11958): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636495.204:11959): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636495.204:11960): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636495.206:11961): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=59799 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636495.261:11962): pid=59814 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636495.261:11963): pid=59814 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6876656377756E736C726E6463736C7871796975617867756C67697968746A74203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363439352E303039343939382D35383932342D3133333039373436393037313637312F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636495.261:11964): pid=59814 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636495.265:11965): pid=59814 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636510.238:11966): pid=59814 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636510.238:11967): pid=59814 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636510.241:11968): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636510.241:11969): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636510.254:11970): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636510.254:11971): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636510.255:11972): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=60174 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636510.278:11973): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636510.278:11974): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636510.522:11975): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636510.522:11976): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636510.523:11977): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=60195 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636510.543:11978): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636510.543:11979): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636510.553:11980): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636510.553:11981): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636510.555:11982): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=60209 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636510.579:11983): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636510.579:11984): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636510.594:11985): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636510.594:11986): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636510.595:11987): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=60230 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636510.624:11988): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636510.624:11989): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636510.638:11990): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636510.638:11991): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636510.639:11992): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=60244 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636510.659:11993): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636510.659:11994): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636510.671:11995): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636510.671:11996): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636510.672:11997): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=60262 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636510.733:11998): pid=60277 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636510.734:11999): pid=60277 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D677A75636D767A6C75776969696C7071677075796D7272777875747A61657566203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363531302E353435323135362D35383932342D37343537353338343236303237332F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636510.734:12000): pid=60277 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636510.737:12001): pid=60277 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636511.022:12002): pid=60277 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636511.023:12003): pid=60277 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636511.026:12004): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636511.026:12005): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636511.038:12006): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636511.038:12007): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636511.043:12008): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=60296 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636511.061:12009): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636511.061:12010): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636511.340:12011): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636511.340:12012): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636511.341:12013): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=60312 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636511.361:12014): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636511.361:12015): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636511.370:12016): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636511.370:12017): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636511.372:12018): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=60326 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636511.399:12019): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636511.399:12020): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636511.421:12021): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636511.421:12022): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636511.422:12023): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=60347 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636511.457:12024): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636511.457:12025): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636511.472:12026): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636511.472:12027): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636511.475:12028): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=60361 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636511.497:12029): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636511.497:12030): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636511.536:12031): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636511.536:12032): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636511.537:12033): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=60376 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636511.594:12034): pid=60393 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636511.594:12035): pid=60393 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D657073746568656E756568727962737768696A73616468686764796F66616978203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363531312E333631383933342D36303331302D35373738333835383330383133352F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636511.595:12036): pid=60393 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636511.600:12037): pid=60393 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636511.864:12038): pid=60393 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636511.864:12039): pid=60393 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636511.880:12040): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636511.880:12041): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636511.892:12042): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636511.892:12043): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636511.894:12044): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=60407 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636511.914:12045): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636511.914:12046): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636512.227:12047): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636512.227:12048): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636512.228:12049): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=60424 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636512.250:12050): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636512.250:12051): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636512.262:12052): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636512.262:12053): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636512.264:12054): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=60438 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636512.285:12055): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636512.286:12056): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636512.304:12057): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636512.304:12058): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636512.306:12059): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=60459 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636512.353:12060): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636512.353:12061): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636512.367:12062): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636512.367:12063): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636512.368:12064): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=60473 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636512.393:12065): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636512.393:12066): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636512.425:12067): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636512.425:12068): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636512.427:12069): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=60489 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636512.486:12070): pid=60505 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636512.486:12071): pid=60505 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6174706A7A62727A65786762746774786C7A73706D6F676461696871686B6776203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363531322E323531393434332D36303432322D3236373532353338353330303030312F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636512.486:12072): pid=60505 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636512.489:12073): pid=60505 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636512.761:12074): pid=60505 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636512.761:12075): pid=60505 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636512.764:12076): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636512.764:12077): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636512.776:12078): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636512.776:12079): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636512.779:12080): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=60513 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636512.802:12081): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636512.802:12082): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636513.186:12083): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636513.186:12084): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636513.187:12085): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=60534 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636513.221:12086): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636513.221:12087): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636513.234:12088): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636513.234:12089): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636513.235:12090): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=60552 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636513.276:12091): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636513.276:12092): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636513.295:12093): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636513.295:12094): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636513.297:12095): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=60573 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636513.343:12096): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636513.343:12097): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636513.358:12098): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636513.358:12099): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636513.360:12100): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=60587 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636513.380:12101): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636513.380:12102): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636513.392:12103): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636513.392:12104): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636513.393:12105): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=60604 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636513.449:12106): pid=60619 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636513.450:12107): pid=60619 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D696372667378627A7868796663647164726E776E6477767465616E7367706F61203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363531332E323231393934342D36303533302D3137333838353039323732393930392F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636513.450:12108): pid=60619 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636513.455:12109): pid=60619 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636513.714:12110): pid=60619 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636513.714:12111): pid=60619 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636513.721:12112): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636513.721:12113): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636513.731:12114): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636513.731:12115): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636513.732:12116): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=60627 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636513.756:12117): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636513.756:12118): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636514.244:12119): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636514.244:12120): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636514.245:12121): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=60650 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636514.264:12122): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636514.265:12123): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636514.276:12124): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636514.276:12125): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636514.277:12126): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=60664 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636514.308:12127): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636514.308:12128): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636514.326:12129): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636514.327:12130): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636514.328:12131): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=60685 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636514.361:12132): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636514.361:12133): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636514.375:12134): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636514.375:12135): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636514.376:12136): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=60699 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636514.395:12137): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636514.395:12138): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636514.409:12139): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636514.409:12140): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636514.410:12141): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=60714 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636514.464:12142): pid=60729 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636514.464:12143): pid=60729 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7578646971777069786B746A68796B676F656B6A7879716A75646E6179627472203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363531342E323635383736382D36303634322D39353936373936313038363536372F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636514.464:12144): pid=60729 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636514.466:12145): pid=60729 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636514.628:12146): pid=60729 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636514.629:12147): pid=60729 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636514.631:12148): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636514.631:12149): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636514.643:12150): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636514.643:12151): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636514.644:12152): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=60735 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636514.663:12153): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636514.663:12154): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636514.861:12155): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636514.861:12156): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636514.862:12157): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=60756 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636514.884:12158): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636514.884:12159): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636514.905:12160): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636514.905:12161): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636514.907:12162): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=60770 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636514.932:12163): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636514.932:12164): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636514.950:12165): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636514.951:12166): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636514.955:12167): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=60792 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636514.991:12168): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636514.991:12169): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636515.008:12170): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636515.009:12171): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636515.010:12172): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=60808 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636515.046:12173): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636515.046:12174): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636515.061:12175): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636515.061:12176): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636515.064:12177): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=60827 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636515.134:12178): pid=60842 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636515.134:12179): pid=60842 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A636E676F726A66736A616D7775636F6D7370676A677165756D717574676B6E203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363531342E3838353839362D36303634322D36353336393536383934333332332F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636515.134:12180): pid=60842 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636515.136:12181): pid=60842 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636515.320:12182): pid=60842 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636515.321:12183): pid=60842 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636515.323:12184): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636515.323:12185): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636515.336:12186): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636515.336:12187): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636515.337:12188): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=60846 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636515.363:12189): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636515.363:12190): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636515.558:12191): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636515.558:12192): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636515.559:12193): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=60861 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636515.578:12194): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636515.578:12195): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636515.588:12196): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636515.588:12197): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636515.589:12198): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=60875 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636515.613:12199): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636515.614:12200): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636515.629:12201): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636515.629:12202): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636515.630:12203): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=60896 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636515.664:12204): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636515.664:12205): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636515.677:12206): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636515.677:12207): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636515.678:12208): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=60913 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636515.697:12209): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636515.697:12210): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636515.710:12211): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636515.710:12212): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636515.711:12213): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=60928 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636515.772:12214): pid=60943 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636515.773:12215): pid=60943 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D666978686F706A786F6B6674617A71666F75657369746B756575706F6F7A756A203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363531352E3537393232392D36303634322D36303434353932383531323831312F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636515.773:12216): pid=60943 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636515.775:12217): pid=60943 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636515.969:12218): pid=60943 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636515.969:12219): pid=60943 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636515.972:12220): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636515.973:12221): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636515.985:12222): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636515.986:12223): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636515.987:12224): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=60953 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636516.017:12225): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636516.017:12226): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636516.223:12227): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636516.223:12228): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636516.227:12229): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=60974 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636516.257:12230): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636516.257:12231): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636516.272:12232): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636516.272:12233): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636516.273:12234): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=60988 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636516.310:12235): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636516.310:12236): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636516.327:12237): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636516.327:12238): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636516.329:12239): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=61009 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636516.372:12240): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636516.372:12241): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636516.383:12242): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636516.386:12243): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636516.388:12244): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=61023 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636516.409:12245): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636516.409:12246): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636516.421:12247): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636516.421:12248): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636516.423:12249): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=61038 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636516.513:12250): pid=61053 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636516.513:12251): pid=61053 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D676A65797079706D776575697877786B6C7070727A7177757A64786E63616376203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363531362E323539303238372D36303634322D3230353736383334373937373032332F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636516.514:12252): pid=61053 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636516.518:12253): pid=61053 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636516.717:12254): pid=61053 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636516.717:12255): pid=61053 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636516.725:12256): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636516.725:12257): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636516.736:12258): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636516.736:12259): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636516.738:12260): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=61057 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636516.779:12261): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636516.779:12262): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636517.017:12263): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636517.017:12264): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636517.018:12265): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=61080 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636517.039:12266): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636517.039:12267): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636517.051:12268): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636517.051:12269): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636517.052:12270): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=61094 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636517.074:12271): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636517.074:12272): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636517.090:12273): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636517.090:12274): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636517.091:12275): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=61115 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636517.127:12276): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636517.127:12277): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636517.142:12278): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636517.142:12279): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636517.143:12280): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=61129 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636517.169:12281): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636517.169:12282): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636517.182:12283): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636517.182:12284): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636517.184:12285): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=61146 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636517.243:12286): pid=61161 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636517.243:12287): pid=61161 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A61786B7170757A717A717A716462776F757271616F68736A6863716D6C6D68203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363531372E303431383531332D36303634322D3235343132353937373937353732342F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636517.243:12288): pid=61161 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636517.246:12289): pid=61161 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636517.442:12290): pid=61161 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636517.442:12291): pid=61161 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636517.450:12292): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636517.450:12293): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636517.463:12294): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636517.463:12295): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636517.464:12296): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=61165 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636517.500:12297): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636517.500:12298): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636517.783:12299): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636517.783:12300): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636517.784:12301): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=61190 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636517.815:12302): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636517.815:12303): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636517.830:12304): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636517.830:12305): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636517.831:12306): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=61206 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636517.856:12307): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636517.856:12308): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636517.873:12309): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636517.873:12310): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636517.875:12311): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=61231 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636517.916:12312): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636517.916:12313): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636517.927:12314): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636517.928:12315): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636517.929:12316): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=61245 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636517.949:12317): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636517.949:12318): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636517.966:12319): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636517.966:12320): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636517.967:12321): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=61260 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636518.025:12322): pid=61275 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636518.025:12323): pid=61275 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D7365737567646475647474786B69746C6A617A6E676666776E6F6275746674203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363531372E383137383031352D36303634322D3132363735363932373135313338382F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636518.025:12324): pid=61275 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636518.030:12325): pid=61275 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636518.209:12326): pid=61275 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636518.210:12327): pid=61275 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636518.215:12328): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636518.215:12329): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636518.229:12330): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636518.229:12331): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636518.230:12332): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=61279 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636518.275:12333): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636518.275:12334): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636518.488:12335): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636518.488:12336): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636518.490:12337): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=61294 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636518.507:12338): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636518.507:12339): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636518.518:12340): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636518.518:12341): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636518.520:12342): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=61308 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636518.548:12343): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636518.548:12344): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636518.565:12345): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636518.565:12346): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636518.569:12347): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=61329 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=SERVICE_STOP msg=audit(1744636518.599:12348): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sssd-kcm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1744636518.602:12349): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636518.603:12350): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636518.615:12351): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636518.616:12352): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636518.617:12353): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=61345 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636518.637:12354): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636518.637:12355): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636518.649:12356): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636518.649:12357): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636518.650:12358): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=61360 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636518.717:12359): pid=61375 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636518.717:12360): pid=61375 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D666A6C626F6562686265726778686269776C736768686B766962796F7167706D203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363531382E353039363239322D36303634322D3235373738353638313737393233342F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636518.717:12361): pid=61375 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636518.719:12362): pid=61375 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636518.914:12363): pid=61375 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636518.914:12364): pid=61375 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636518.916:12365): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636518.917:12366): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636518.931:12367): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636518.931:12368): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636518.932:12369): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=61386 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636518.951:12370): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636518.952:12371): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636519.177:12372): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636519.177:12373): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636519.178:12374): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=61403 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636519.207:12375): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636519.207:12376): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636519.218:12377): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636519.218:12378): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636519.219:12379): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=61421 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636519.242:12380): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636519.242:12381): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636519.265:12382): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636519.265:12383): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636519.267:12384): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=61442 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636519.306:12385): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636519.306:12386): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636519.322:12387): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636519.322:12388): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636519.323:12389): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=61456 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636519.347:12390): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636519.347:12391): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636519.358:12392): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636519.358:12393): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636519.360:12394): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=61471 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636519.421:12395): pid=61486 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636519.421:12396): pid=61486 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D61716473787672636C62627074697A69686B6D71666D707A6274767762636B61203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363531392E323039333130352D36303634322D32323233363639393438353038312F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636519.421:12397): pid=61486 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636519.422:12398): pid=61486 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636519.586:12399): pid=61486 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636519.586:12400): pid=61486 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636519.588:12401): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636519.588:12402): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636519.601:12403): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636519.601:12404): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636519.604:12405): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=61490 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636519.627:12406): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636519.627:12407): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636519.831:12408): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636519.831:12409): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636519.833:12410): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=61511 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636519.853:12411): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636519.853:12412): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636519.863:12413): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636519.863:12414): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636519.864:12415): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=61525 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636519.901:12416): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636519.901:12417): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636519.919:12418): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636519.919:12419): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636519.920:12420): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=61546 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636519.958:12421): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636519.958:12422): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636519.970:12423): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636519.970:12424): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636519.971:12425): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=61560 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636519.989:12426): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636519.989:12427): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636520.001:12428): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636520.002:12429): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636520.003:12430): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=61575 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636520.054:12431): pid=61590 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636520.054:12432): pid=61590 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D69726F626E676D6279746364686C77676F6B6D74787573796C62686B61666D73203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363531392E3835343435312D36303634322D3138393439343436363035343733312F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636520.054:12433): pid=61590 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636520.057:12434): pid=61590 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636520.252:12435): pid=61590 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636520.252:12436): pid=61590 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636520.256:12437): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636520.256:12438): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636520.268:12439): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636520.269:12440): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636520.270:12441): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=61594 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636520.294:12442): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636520.294:12443): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636520.528:12444): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636520.528:12445): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636520.530:12446): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=61612 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636520.557:12447): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636520.557:12448): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636520.566:12449): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636520.566:12450): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636520.567:12451): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=61630 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636520.595:12452): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636520.595:12453): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636520.611:12454): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636520.611:12455): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636520.613:12456): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=61652 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636520.645:12457): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636520.645:12458): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636520.657:12459): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636520.657:12460): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636520.658:12461): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=61667 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636520.679:12462): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636520.680:12463): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636520.692:12464): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636520.692:12465): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636520.694:12466): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=61690 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636520.791:12467): pid=61705 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636520.791:12468): pid=61705 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A736D6B746B6A7479767063636B636C716A686F6E6D706D686A6D65776B6276203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363532302E3535383135312D36303634322D3134393939313035323238333137322F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636520.792:12469): pid=61705 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636520.797:12470): pid=61705 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636520.973:12471): pid=61705 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636520.974:12472): pid=61705 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636520.977:12473): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636520.977:12474): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636520.991:12475): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636520.991:12476): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636520.992:12477): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=61722 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636521.012:12478): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636521.012:12479): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636521.200:12480): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636521.201:12481): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636521.202:12482): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=61737 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636521.219:12483): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636521.219:12484): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636521.230:12485): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636521.230:12486): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636521.231:12487): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=61751 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636521.259:12488): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636521.259:12489): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636521.280:12490): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636521.280:12491): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636521.282:12492): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=61772 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636521.317:12493): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636521.317:12494): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636521.329:12495): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636521.329:12496): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636521.330:12497): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=61786 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636521.349:12498): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636521.349:12499): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636521.361:12500): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636521.361:12501): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636521.362:12502): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=61801 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636521.431:12503): pid=61816 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636521.432:12504): pid=61816 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D676A6F6B756C636B7469756B76616576626B6D6A6768636970676A7A6C656978203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363532312E323231333736342D36303634322D3137323637373932383934393137312F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636521.432:12505): pid=61816 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636521.437:12506): pid=61816 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636521.628:12507): pid=61816 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636521.628:12508): pid=61816 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636521.631:12509): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636521.631:12510): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636521.642:12511): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636521.642:12512): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636521.643:12513): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=61826 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636521.663:12514): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636521.663:12515): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636521.928:12516): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636521.928:12517): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636521.929:12518): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=61842 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636521.951:12519): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636521.951:12520): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636521.961:12521): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636521.962:12522): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636521.965:12523): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=61856 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636522.009:12524): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636522.009:12525): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636522.035:12526): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636522.035:12527): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636522.037:12528): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=61879 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636522.095:12529): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636522.095:12530): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636522.112:12531): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636522.112:12532): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636522.113:12533): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=61897 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636522.138:12534): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636522.138:12535): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636522.156:12536): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636522.156:12537): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636522.158:12538): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=61912 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636522.219:12539): pid=61927 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636522.219:12540): pid=61927 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D79756A6371767A6361797861766876687877736C6669617A6665706263776867203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363532312E3935323731362D36303634322D33373437333439373035383632372F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636522.219:12541): pid=61927 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636522.221:12542): pid=61927 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636522.423:12543): pid=61927 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636522.423:12544): pid=61927 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636522.426:12545): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636522.426:12546): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636522.440:12547): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636522.440:12548): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636522.442:12549): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=61937 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636522.465:12550): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636522.466:12551): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636522.696:12552): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636522.696:12553): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636522.698:12554): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=61952 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636522.716:12555): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636522.716:12556): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636522.726:12557): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636522.726:12558): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636522.727:12559): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=61966 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636522.748:12560): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636522.748:12561): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636522.765:12562): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636522.765:12563): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636522.766:12564): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=61987 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636522.798:12565): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636522.798:12566): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636522.810:12567): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636522.810:12568): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636522.811:12569): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=62001 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636522.831:12570): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636522.831:12571): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636522.844:12572): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636522.844:12573): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636522.845:12574): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=62016 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636522.898:12575): pid=62031 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636522.898:12576): pid=62031 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D716E7972666E7A6577706A7977637870687676786D676D6C7369766476796F76203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363532322E373137343431382D36303634322D34303438343532313539313930352F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636522.898:12577): pid=62031 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636522.900:12578): pid=62031 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636523.076:12579): pid=62031 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636523.077:12580): pid=62031 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636523.079:12581): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636523.079:12582): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636523.091:12583): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636523.091:12584): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636523.092:12585): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=62035 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636523.114:12586): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636523.114:12587): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636523.349:12588): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636523.349:12589): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636523.351:12590): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=62056 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636523.370:12591): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636523.370:12592): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636523.381:12593): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636523.381:12594): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636523.383:12595): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=62070 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636523.425:12596): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636523.425:12597): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636523.443:12598): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636523.446:12599): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636523.447:12600): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=62092 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636523.484:12601): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636523.484:12602): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636523.496:12603): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636523.496:12604): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636523.497:12605): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=62107 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636523.517:12606): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636523.517:12607): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636523.532:12608): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636523.532:12609): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636523.534:12610): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=62126 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636523.592:12611): pid=62141 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636523.592:12612): pid=62141 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D747364756B656D697967626F6E77676C656D746F67706578706A687271677365203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363532332E3337313731322D36303634322D3233313231323934363539313637332F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636523.592:12613): pid=62141 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636523.594:12614): pid=62141 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636523.771:12615): pid=62141 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636523.771:12616): pid=62141 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636523.774:12617): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636523.774:12618): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636523.788:12619): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636523.788:12620): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636523.789:12621): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=62145 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636523.809:12622): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636523.809:12623): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636524.021:12624): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636524.021:12625): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636524.022:12626): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=62162 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636524.041:12627): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636524.041:12628): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636524.051:12629): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636524.051:12630): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636524.054:12631): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=62180 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636524.074:12632): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636524.074:12633): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636524.089:12634): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636524.090:12635): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636524.091:12636): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=62201 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636524.119:12637): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636524.119:12638): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636524.131:12639): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636524.131:12640): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636524.132:12641): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=62215 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636524.151:12642): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636524.151:12643): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636524.162:12644): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636524.162:12645): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636524.163:12646): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=62230 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636524.215:12647): pid=62245 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636524.215:12648): pid=62245 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D75747871637A786F756F686F7672646A68746D75716C7275656973786C646761203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363532342E303432353039382D36303634322D3233363235323830343736393037352F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636524.216:12649): pid=62245 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636524.218:12650): pid=62245 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636524.380:12651): pid=62245 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636524.380:12652): pid=62245 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636524.383:12653): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636524.384:12654): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636524.395:12655): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636524.395:12656): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636524.396:12657): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=62249 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636524.415:12658): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636524.415:12659): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636524.615:12660): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636524.615:12661): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636524.616:12662): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=62264 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636524.634:12663): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636524.635:12664): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636524.647:12665): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636524.647:12666): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636524.649:12667): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=62278 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636524.678:12668): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636524.678:12669): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636524.693:12670): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636524.693:12671): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636524.696:12672): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=62299 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636524.739:12673): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636524.739:12674): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636524.751:12675): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636524.751:12676): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636524.752:12677): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=62313 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636524.784:12678): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636524.784:12679): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636524.795:12680): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636524.795:12681): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636524.796:12682): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=62330 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636524.855:12683): pid=62349 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636524.855:12684): pid=62349 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D65776E677069787664726471626973647A736D7867676966696676776463697A203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363532342E363337303932342D36303634322D32343232353030393138393832342F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636524.855:12685): pid=62349 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636524.857:12686): pid=62349 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636525.016:12687): pid=62349 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636525.016:12688): pid=62349 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636525.018:12689): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636525.020:12690): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636525.032:12691): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636525.032:12692): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636525.033:12693): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=62359 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636525.053:12694): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636525.053:12695): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636525.248:12696): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636525.248:12697): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636525.249:12698): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=62374 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636525.267:12699): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636525.268:12700): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636525.277:12701): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636525.277:12702): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636525.278:12703): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=62388 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636525.302:12704): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636525.302:12705): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636525.319:12706): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636525.319:12707): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636525.320:12708): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=62409 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636525.352:12709): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636525.352:12710): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636525.364:12711): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636525.364:12712): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636525.365:12713): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=62423 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636525.389:12714): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636525.389:12715): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636525.400:12716): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636525.400:12717): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636525.401:12718): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=62438 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636525.462:12719): pid=62453 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636525.462:12720): pid=62453 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D666969746664696171646D73796B62646F7575706F6A62676B6975736B616778203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363532352E323638383934372D36303634322D3234363133333737363232333234382F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636525.462:12721): pid=62453 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636525.465:12722): pid=62453 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636525.628:12723): pid=62453 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636525.628:12724): pid=62453 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636525.631:12725): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636525.631:12726): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636525.643:12727): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636525.643:12728): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636525.644:12729): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=62459 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636525.662:12730): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636525.663:12731): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636525.893:12732): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636525.893:12733): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636525.894:12734): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=62478 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636525.913:12735): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636525.913:12736): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636525.923:12737): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636525.923:12738): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636525.925:12739): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=62492 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636525.946:12740): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636525.946:12741): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636525.965:12742): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636525.965:12743): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636525.966:12744): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=62513 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636525.998:12745): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636525.998:12746): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636526.011:12747): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636526.011:12748): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636526.012:12749): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=62530 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636526.042:12750): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636526.042:12751): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636526.055:12752): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636526.055:12753): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636526.058:12754): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=62545 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636526.134:12755): pid=62562 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636526.135:12756): pid=62562 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D687779636E677572636B726164756D66717573666B7775786F797A79706C676D203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363532352E393134323032352D36303634322D3134353636303132313535343232382F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636526.135:12757): pid=62562 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636526.137:12758): pid=62562 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636526.332:12759): pid=62562 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636526.333:12760): pid=62562 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636526.336:12761): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636526.336:12762): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636526.348:12763): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636526.349:12764): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636526.350:12765): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=62570 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636526.371:12766): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636526.371:12767): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636526.601:12768): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636526.601:12769): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636526.602:12770): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=62591 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636526.621:12771): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636526.621:12772): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636526.631:12773): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636526.631:12774): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636526.632:12775): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=62605 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636526.660:12776): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636526.660:12777): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636526.677:12778): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636526.677:12779): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636526.679:12780): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=62627 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636526.712:12781): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636526.712:12782): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636526.725:12783): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636526.725:12784): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636526.726:12785): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=62641 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636526.743:12786): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636526.743:12787): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636526.758:12788): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636526.758:12789): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636526.759:12790): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=62656 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636526.818:12791): pid=62671 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636526.818:12792): pid=62671 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D737268627263666475726676726D676D6D656D696F65737467766D74636A7069203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363532362E3632313934352D36303634322D39363031353933383338313234312F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636526.819:12793): pid=62671 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636526.820:12794): pid=62671 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636526.986:12795): pid=62671 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636526.986:12796): pid=62671 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636526.989:12797): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636526.990:12798): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636527.001:12799): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636527.001:12800): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636527.002:12801): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=62675 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636527.022:12802): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636527.022:12803): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636527.285:12804): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636527.285:12805): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636527.286:12806): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=62692 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636527.312:12807): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636527.312:12808): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636527.323:12809): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636527.323:12810): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636527.324:12811): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=62708 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636527.351:12812): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636527.351:12813): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636527.369:12814): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636527.369:12815): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636527.370:12816): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=62733 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636527.412:12817): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636527.412:12818): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636527.424:12819): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636527.425:12820): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636527.428:12821): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=62747 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636527.452:12822): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636527.452:12823): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636527.463:12824): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636527.464:12825): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636527.465:12826): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=62762 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636527.522:12827): pid=62779 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636527.523:12828): pid=62779 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6973677465746477626E7A6571787864786F6F7966696D6E6262686B76676970203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363532372E33313431332D36303634322D3138393731303534303132303534302F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636527.523:12829): pid=62779 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636527.524:12830): pid=62779 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636527.708:12831): pid=62779 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636527.708:12832): pid=62779 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636527.711:12833): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636527.712:12834): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636527.724:12835): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636527.724:12836): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636527.725:12837): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=62787 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636527.746:12838): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636527.746:12839): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636527.965:12840): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636527.965:12841): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636527.966:12842): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=62802 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636527.986:12843): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636527.986:12844): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636527.998:12845): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636527.998:12846): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636527.999:12847): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=62816 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636528.025:12848): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636528.025:12849): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636528.040:12850): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636528.040:12851): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636528.042:12852): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=62837 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636528.071:12853): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636528.071:12854): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636528.084:12855): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636528.084:12856): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636528.085:12857): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=62851 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636528.106:12858): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636528.106:12859): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636528.117:12860): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636528.117:12861): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636528.118:12862): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=62866 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636528.174:12863): pid=62881 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636528.174:12864): pid=62881 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B617065677873707A6F71696F70746D7567747173616876656E7375686E7472203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363532372E393838313731382D36303634322D3131333534353037323533353237382F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636528.175:12865): pid=62881 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636528.176:12866): pid=62881 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636528.388:12867): pid=62881 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636528.388:12868): pid=62881 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636528.392:12869): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636528.392:12870): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636528.403:12871): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636528.403:12872): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636528.404:12873): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=62891 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636528.424:12874): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636528.424:12875): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636528.643:12876): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636528.644:12877): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636528.645:12878): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=62906 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636528.665:12879): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636528.665:12880): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636528.675:12881): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636528.675:12882): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636528.676:12883): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=62920 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636528.700:12884): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636528.700:12885): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636528.718:12886): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636528.718:12887): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636528.719:12888): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=62941 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636528.768:12889): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636528.768:12890): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636528.783:12891): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636528.783:12892): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636528.784:12893): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=62955 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636528.811:12894): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636528.811:12895): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636528.822:12896): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636528.822:12897): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636528.823:12898): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=62972 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636528.877:12899): pid=62987 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636528.877:12900): pid=62987 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B736872756D6C616C6F6F706F6B6B766A74727266776F616D6A61666E626271203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363532382E363635393432372D36303634322D3237363436313337343835363536342F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636528.878:12901): pid=62987 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636528.886:12902): pid=62987 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636529.068:12903): pid=62987 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636529.068:12904): pid=62987 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636529.071:12905): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636529.071:12906): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636529.083:12907): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636529.083:12908): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636529.084:12909): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=63001 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636529.107:12910): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636529.107:12911): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636529.314:12912): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636529.314:12913): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636529.319:12914): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=63016 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636529.342:12915): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636529.342:12916): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636529.354:12917): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636529.354:12918): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636529.356:12919): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=63030 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636529.389:12920): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636529.389:12921): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636529.417:12922): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636529.417:12923): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636529.418:12924): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=63051 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636529.450:12925): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636529.450:12926): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636529.462:12927): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636529.462:12928): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636529.463:12929): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=63065 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636529.482:12930): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636529.482:12931): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636529.494:12932): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636529.494:12933): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636529.495:12934): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=63080 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636529.557:12935): pid=63095 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636529.558:12936): pid=63095 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D676E6A6464767067656562666D637A6A78647566716D717273656B6C6C746869203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363532392E333433373032332D36303634322D38393139323339393233313431392F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636529.558:12937): pid=63095 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636529.560:12938): pid=63095 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636529.749:12939): pid=63095 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636529.750:12940): pid=63095 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636529.755:12941): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636529.755:12942): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636529.768:12943): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636529.768:12944): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636529.770:12945): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=63099 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636529.790:12946): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636529.790:12947): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636530.074:12948): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636530.074:12949): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636530.076:12950): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=63120 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636530.110:12951): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636530.110:12952): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636530.124:12953): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636530.124:12954): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636530.126:12955): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=63134 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636530.161:12956): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636530.161:12957): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636530.177:12958): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636530.177:12959): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636530.178:12960): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=63157 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636530.212:12961): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636530.212:12962): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636530.225:12963): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636530.225:12964): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636530.226:12965): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=63175 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636530.246:12966): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636530.246:12967): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636530.259:12968): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636530.259:12969): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636530.261:12970): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=63190 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636530.317:12971): pid=63205 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636530.317:12972): pid=63205 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7266756E6663617579786D667865616B6772656C6F6E68697268676374626C79203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363533302E313131363732342D36303634322D33353537333333393933323333372F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636530.318:12973): pid=63205 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636530.320:12974): pid=63205 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636530.519:12975): pid=63205 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636530.519:12976): pid=63205 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636530.522:12977): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636530.523:12978): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636530.537:12979): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636530.537:12980): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636530.539:12981): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=63209 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636530.560:12982): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636530.560:12983): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636530.784:12984): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636530.785:12985): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636530.787:12986): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=63230 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636530.809:12987): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636530.809:12988): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636530.831:12989): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636530.831:12990): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636530.832:12991): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=63244 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636530.858:12992): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636530.859:12993): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636530.875:12994): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636530.875:12995): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636530.877:12996): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=63265 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636530.916:12997): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636530.916:12998): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636530.928:12999): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636530.929:13000): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636530.930:13001): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=63279 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636530.955:13002): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636530.955:13003): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636530.967:13004): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636530.967:13005): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636530.968:13006): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=63294 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636531.019:13007): pid=63309 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636531.020:13008): pid=63309 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D786C66666C637979716379766D6F786564687A726B68656A69617678656F7272203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363533302E383130313030362D36303634322D3131333437323334333732383133302F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636531.020:13009): pid=63309 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636531.021:13010): pid=63309 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636531.216:13011): pid=63309 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636531.217:13012): pid=63309 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636531.220:13013): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636531.221:13014): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636531.234:13015): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636531.234:13016): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636531.235:13017): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=63316 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636531.256:13018): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636531.256:13019): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636531.496:13020): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636531.496:13021): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636531.497:13022): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=63334 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636531.521:13023): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636531.521:13024): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636531.532:13025): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636531.532:13026): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636531.534:13027): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=63353 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636531.558:13028): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636531.558:13029): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636531.575:13030): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636531.575:13031): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636531.576:13032): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=63378 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636531.609:13033): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636531.609:13034): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636531.622:13035): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636531.622:13036): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636531.623:13037): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=63392 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636531.643:13038): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636531.643:13039): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636531.657:13040): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636531.657:13041): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636531.658:13042): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=63407 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636531.717:13043): pid=63422 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636531.717:13044): pid=63422 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D636F72766B7863646F686867646D6D7A6F6A68676C6A7170727078646376787A203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363533312E3532333130342D36303634322D3232333533393135313931373733352F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636531.718:13045): pid=63422 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636531.719:13046): pid=63422 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636531.913:13047): pid=63422 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636531.913:13048): pid=63422 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636531.916:13049): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636531.916:13050): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636531.930:13051): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636531.930:13052): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636531.931:13053): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=63426 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636531.954:13054): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636531.954:13055): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636532.205:13056): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636532.205:13057): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636532.206:13058): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=63441 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636532.238:13059): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636532.238:13060): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636532.252:13061): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636532.252:13062): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636532.254:13063): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=63455 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636532.293:13064): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636532.293:13065): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636532.313:13066): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636532.313:13067): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636532.315:13068): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=63498 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636532.363:13069): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636532.363:13070): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636532.375:13071): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636532.375:13072): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636532.376:13073): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=63516 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636532.417:13074): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636532.417:13075): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636532.428:13076): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636532.430:13077): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636532.432:13078): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=63532 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636532.530:13079): pid=63547 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636532.530:13080): pid=63547 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E716C6169726A6A716F757773627A7A62796F69686B64626D736B6F64747174203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363533322E3233393930312D36303634322D34323337343231393431343939392F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636532.530:13081): pid=63547 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636532.534:13082): pid=63547 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636532.720:13083): pid=63547 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636532.720:13084): pid=63547 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636532.723:13085): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636532.723:13086): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636532.736:13087): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636532.736:13088): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636532.738:13089): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=63572 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636532.765:13090): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636532.765:13091): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636533.037:13092): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636533.037:13093): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636533.038:13094): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=63606 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636533.066:13095): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636533.066:13096): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636533.079:13097): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636533.079:13098): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636533.080:13099): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=63622 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636533.126:13100): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636533.126:13101): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636533.141:13102): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636533.141:13103): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636533.142:13104): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=63666 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636533.195:13105): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636533.195:13106): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636533.208:13107): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636533.208:13108): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636533.209:13109): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=63682 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636533.246:13110): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636533.246:13111): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636533.257:13112): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636533.260:13113): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636533.262:13114): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=63697 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636533.338:13115): pid=63718 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636533.338:13116): pid=63718 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D76796A75766C636F6B696C68636C68697264736A6E6F7967776968766C697768203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363533332E303637303033332D36303634322D3135303436353536333238313135372F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636533.339:13117): pid=63718 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636533.343:13118): pid=63718 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636533.537:13119): pid=63718 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636533.538:13120): pid=63718 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636533.543:13121): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636533.543:13122): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636533.555:13123): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636533.555:13124): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636533.557:13125): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=63731 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636533.584:13126): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636533.584:13127): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636533.802:13128): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636533.802:13129): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636533.803:13130): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=63748 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636533.840:13131): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636533.840:13132): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636533.856:13133): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636533.859:13134): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636533.860:13135): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=63762 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636533.909:13136): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636533.909:13137): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636533.930:13138): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636533.930:13139): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636533.931:13140): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=63801 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636533.985:13141): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636533.985:13142): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636533.997:13143): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636533.997:13144): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636533.998:13145): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=63824 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636534.021:13146): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636534.021:13147): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636534.027:13148): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636534.027:13149): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636534.029:13150): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=63840 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636534.107:13151): pid=63857 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636534.107:13152): pid=63857 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D76677276636B6368696862726D6F6679756768676B7271676E736D7565637276203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363533332E383432343238342D36303634322D3131353232363532313735383330362F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636534.108:13153): pid=63857 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636534.110:13154): pid=63857 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636534.291:13155): pid=63857 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636534.291:13156): pid=63857 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636534.293:13157): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636534.293:13158): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636534.307:13159): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636534.307:13160): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636534.309:13161): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=63916 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636534.342:13162): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636534.342:13163): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636534.585:13164): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636534.585:13165): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636534.585:13166): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=63939 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636534.610:13167): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636534.610:13168): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636534.628:13169): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636534.628:13170): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636534.629:13171): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=63955 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636534.668:13172): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636534.668:13173): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636534.687:13174): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636534.687:13175): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636534.691:13176): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=63980 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636534.752:13177): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636534.752:13178): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636534.765:13179): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636534.765:13180): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636534.769:13181): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=63994 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636534.806:13182): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636534.806:13183): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636534.822:13184): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636534.822:13185): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636534.824:13186): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=64009 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636534.908:13187): pid=64024 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636534.908:13188): pid=64024 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D646F636466776774646E7874696F78666E7A76647A7A6D6675786A6D6C6D6F203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363533342E363132333632342D36303634322D3230353537313833343932393335302F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636534.909:13189): pid=64024 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636534.914:13190): pid=64024 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636535.102:13191): pid=64024 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636535.102:13192): pid=64024 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636535.105:13193): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636535.106:13194): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636535.116:13195): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636535.116:13196): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636535.117:13197): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=64028 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636535.144:13198): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636535.144:13199): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636535.523:13200): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636535.523:13201): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636535.524:13202): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=64054 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636535.551:13203): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636535.551:13204): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636535.566:13205): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636535.566:13206): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636535.570:13207): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=64068 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636535.615:13208): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636535.615:13209): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636535.805:13210): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636535.805:13211): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636535.806:13212): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=64089 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636535.863:13213): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636535.863:13214): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636535.876:13215): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636535.876:13216): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636535.878:13217): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=64103 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636535.911:13218): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636535.911:13219): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636535.922:13220): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636535.926:13221): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636535.928:13222): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=64118 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636536.009:13223): pid=64133 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636536.009:13224): pid=64133 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7169786771686F6A6670636D7969746C6275687368646571696F6A796175616E203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363533352E3535333934382D36343034362D3137393833353430393738373635312F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636536.010:13225): pid=64133 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636536.011:13226): pid=64133 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636536.172:13227): pid=64133 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636536.176:13228): pid=64133 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636536.178:13229): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636536.178:13230): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636536.194:13231): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636536.194:13232): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636536.195:13233): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=64141 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636536.256:13234): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636536.256:13235): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636536.264:13236): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636536.264:13237): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636536.265:13238): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=64157 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636536.300:13239): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636536.300:13240): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636536.318:13241): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636536.321:13242): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636536.322:13243): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=64177 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636536.378:13244): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636536.378:13245): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636536.394:13246): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636536.394:13247): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636536.395:13248): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=64191 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636536.428:13249): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636536.428:13250): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636536.441:13251): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636536.441:13252): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636536.443:13253): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=64206 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636536.517:13254): pid=64221 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636536.518:13255): pid=64221 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B6169727A716C6C6962667779767162676C73786A71746671756B7A6E736E73203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363533352E3535333934382D36343034362D3137393833353430393738373635312F416E736962616C6C5A5F636F70792E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636536.518:13256): pid=64221 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636536.521:13257): pid=64221 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636536.762:13258): pid=64221 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636536.762:13259): pid=64221 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636536.765:13260): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636536.766:13261): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636536.780:13262): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636536.781:13263): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636536.782:13264): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=64238 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636536.802:13265): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636536.802:13266): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636537.075:13267): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636537.075:13268): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636537.077:13269): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=64255 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636537.106:13270): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636537.106:13271): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636537.118:13272): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636537.118:13273): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636537.120:13274): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=64269 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636537.145:13275): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636537.145:13276): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636537.163:13277): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636537.163:13278): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636537.164:13279): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=64290 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636537.203:13280): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636537.204:13281): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636537.215:13282): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636537.215:13283): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636537.217:13284): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=64308 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636537.238:13285): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636537.238:13286): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636537.250:13287): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636537.250:13288): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636537.252:13289): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=64327 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636537.314:13290): pid=64342 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636537.315:13291): pid=64342 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=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 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636537.315:13292): pid=64342 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636537.317:13293): pid=64342 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=BPF msg=audit(1744636538.508:13294): prog-id=412 op=LOAD type=SYSCALL msg=audit(1744636538.508:13294): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00012bc48 a2=90 a3=0 items=0 ppid=64387 pid=64398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636538.508:13294): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31393264333265326565633666346330376439363731313437 type=BPF msg=audit(1744636538.508:13295): prog-id=413 op=LOAD type=SYSCALL msg=audit(1744636538.508:13295): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c00012b9d8 a2=90 a3=0 items=0 ppid=64387 pid=64398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636538.508:13295): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31393264333265326565633666346330376439363731313437 type=BPF msg=audit(1744636538.509:13296): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636538.509:13297): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636538.509:13298): prog-id=414 op=LOAD type=SYSCALL msg=audit(1744636538.509:13298): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00012beb0 a2=90 a3=0 items=0 ppid=64387 pid=64398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636538.509:13298): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31393264333265326565633666346330376439363731313437 type=BPF msg=audit(1744636538.831:13299): prog-id=415 op=LOAD type=BPF msg=audit(1744636538.832:13300): prog-id=416 op=LOAD type=SYSCALL msg=audit(1744636538.832:13300): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00011bad0 a2=90 a3=0 items=0 ppid=64515 pid=64534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636538.832:13300): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62653765333861613966666661383531613861323536346434 type=BPF msg=audit(1744636538.832:13301): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636538.832:13302): prog-id=417 op=LOAD type=SYSCALL msg=audit(1744636538.832:13302): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00011bc48 a2=90 a3=0 items=0 ppid=64515 pid=64534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636538.832:13302): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62653765333861613966666661383531613861323536346434 type=BPF msg=audit(1744636538.832:13303): prog-id=418 op=LOAD type=SYSCALL msg=audit(1744636538.832:13303): arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=c00011b9d8 a2=90 a3=0 items=0 ppid=64515 pid=64534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636538.832:13303): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62653765333861613966666661383531613861323536346434 type=BPF msg=audit(1744636538.833:13304): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636538.833:13305): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636538.833:13306): prog-id=419 op=LOAD type=SYSCALL msg=audit(1744636538.833:13306): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00011beb0 a2=90 a3=0 items=0 ppid=64515 pid=64534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636538.833:13306): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62653765333861613966666661383531613861323536346434 type=BPF msg=audit(1744636538.884:13307): prog-id=420 op=LOAD type=BPF msg=audit(1744636538.886:13308): prog-id=421 op=LOAD type=SYSCALL msg=audit(1744636538.886:13308): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001b9ad0 a2=90 a3=0 items=0 ppid=64598 pid=64657 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636538.886:13308): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61336331626638656433306165353062366161393064636233 type=BPF msg=audit(1744636538.886:13309): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636538.886:13310): prog-id=422 op=LOAD type=SYSCALL msg=audit(1744636538.886:13310): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001b9c48 a2=90 a3=0 items=0 ppid=64598 pid=64657 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636538.886:13310): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61336331626638656433306165353062366161393064636233 type=BPF msg=audit(1744636538.886:13311): prog-id=423 op=LOAD type=SYSCALL msg=audit(1744636538.886:13311): arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=c0001b99d8 a2=90 a3=0 items=0 ppid=64598 pid=64657 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636538.886:13311): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61336331626638656433306165353062366161393064636233 type=BPF msg=audit(1744636538.886:13312): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636538.886:13313): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636538.886:13314): prog-id=424 op=LOAD type=SYSCALL msg=audit(1744636538.886:13314): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001b9eb0 a2=90 a3=0 items=0 ppid=64598 pid=64657 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636538.886:13314): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61336331626638656433306165353062366161393064636233 type=BPF msg=audit(1744636538.946:13315): prog-id=425 op=LOAD type=BPF msg=audit(1744636538.950:13316): prog-id=426 op=LOAD type=SYSCALL msg=audit(1744636538.950:13316): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001b9ad0 a2=90 a3=0 items=0 ppid=64608 pid=64685 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636538.950:13316): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30333532633162636336343837326265343033373834316161 type=BPF msg=audit(1744636538.951:13317): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636538.951:13318): prog-id=427 op=LOAD type=SYSCALL msg=audit(1744636538.951:13318): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001b9c48 a2=90 a3=0 items=0 ppid=64608 pid=64685 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636538.951:13318): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30333532633162636336343837326265343033373834316161 type=BPF msg=audit(1744636538.953:13319): prog-id=428 op=LOAD type=SYSCALL msg=audit(1744636538.953:13319): arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=c0001b99d8 a2=90 a3=0 items=0 ppid=64608 pid=64685 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636538.953:13319): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30333532633162636336343837326265343033373834316161 type=BPF msg=audit(1744636538.953:13320): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636538.953:13321): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636538.954:13322): prog-id=429 op=LOAD type=SYSCALL msg=audit(1744636538.954:13322): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001b9eb0 a2=90 a3=0 items=0 ppid=64608 pid=64685 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636538.954:13322): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30333532633162636336343837326265343033373834316161 type=BPF msg=audit(1744636538.957:13323): prog-id=430 op=LOAD type=BPF msg=audit(1744636538.960:13324): prog-id=431 op=LOAD type=SYSCALL msg=audit(1744636538.960:13324): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001b9ad0 a2=90 a3=0 items=0 ppid=64606 pid=64706 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636538.960:13324): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65666431663230356639386439396330663730303933393664 type=BPF msg=audit(1744636538.962:13325): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636538.962:13326): prog-id=432 op=LOAD type=SYSCALL msg=audit(1744636538.962:13326): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001b9c48 a2=90 a3=0 items=0 ppid=64606 pid=64706 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636538.962:13326): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65666431663230356639386439396330663730303933393664 type=BPF msg=audit(1744636538.962:13327): prog-id=433 op=LOAD type=SYSCALL msg=audit(1744636538.962:13327): arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=c0001b99d8 a2=90 a3=0 items=0 ppid=64606 pid=64706 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636538.962:13327): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65666431663230356639386439396330663730303933393664 type=BPF msg=audit(1744636538.963:13328): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636538.964:13329): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636538.964:13330): prog-id=434 op=LOAD type=SYSCALL msg=audit(1744636538.964:13330): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001b9eb0 a2=90 a3=0 items=0 ppid=64606 pid=64706 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636538.964:13330): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65666431663230356639386439396330663730303933393664 type=USER_END msg=audit(1744636539.181:13331): pid=64342 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636539.182:13332): pid=64342 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636539.185:13333): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636539.185:13334): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636539.198:13335): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636539.198:13336): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636539.199:13337): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=65025 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636539.224:13338): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636539.224:13339): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=BPF msg=audit(1744636539.601:13340): prog-id=0 op=UNLOAD type=USER_LOGIN msg=audit(1744636539.924:13341): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636539.924:13342): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636539.925:13343): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=65352 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636539.953:13344): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636539.953:13345): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636539.966:13346): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636539.966:13347): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636539.967:13348): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=65367 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636540.007:13349): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636540.007:13350): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636540.028:13351): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636540.028:13352): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636540.030:13353): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=65388 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636540.073:13354): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636540.073:13355): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636540.087:13356): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636540.087:13357): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636540.088:13358): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=65402 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636540.128:13359): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636540.128:13360): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636540.142:13361): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636540.142:13362): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636540.146:13363): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=65417 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636540.236:13364): pid=65432 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636540.237:13365): pid=65432 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C6E7962626A7776667762646C677A6B6D6B726273647A6D647879776B6C746C203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363533392E393536323533332D36353231362D3130303931323638393838313131372F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636540.238:13366): pid=65432 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636540.244:13367): pid=65432 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636540.588:13368): pid=65432 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636540.588:13369): pid=65432 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636540.593:13370): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636540.593:13371): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636540.606:13372): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636540.606:13373): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636540.607:13374): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=65460 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636540.647:13375): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636540.647:13376): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636540.922:13377): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636540.923:13378): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636540.924:13379): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=65482 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636540.956:13380): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636540.956:13381): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636540.971:13382): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636540.971:13383): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636540.973:13384): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=65499 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636541.005:13385): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636541.005:13386): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636541.022:13387): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636541.022:13388): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636541.024:13389): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=65520 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636541.073:13390): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636541.073:13391): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636541.085:13392): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636541.085:13393): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636541.086:13394): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=65534 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636541.119:13395): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636541.119:13396): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636541.135:13397): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636541.135:13398): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636541.136:13399): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=65549 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636541.217:13400): pid=65564 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636541.218:13401): pid=65564 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D706F626B616863736864676E6E6676757973796D7274616F757A646E7763756B203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363534302E393539343731352D36353231362D3130373432313033393537343634372F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636541.221:13402): pid=65564 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636541.227:13403): pid=65564 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636541.594:13404): pid=65564 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636541.594:13405): pid=65564 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636541.598:13406): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636541.598:13407): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636541.610:13408): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636541.613:13409): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636541.614:13410): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=65581 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636541.647:13411): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636541.647:13412): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636541.949:13413): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636541.949:13414): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636541.950:13415): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=65599 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636541.976:13416): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636541.976:13417): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636541.986:13418): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636541.986:13419): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636541.988:13420): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=65616 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636542.047:13421): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636542.047:13422): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636542.067:13423): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636542.069:13424): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636542.070:13425): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=65638 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636542.110:13426): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636542.110:13427): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636542.122:13428): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636542.122:13429): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636542.124:13430): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=65652 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636542.155:13431): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636542.155:13432): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636542.170:13433): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636542.170:13434): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636542.173:13435): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=65667 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636542.247:13436): pid=65682 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636542.247:13437): pid=65682 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7272746163686E656F706B666A74687775627568646873676D7561756B666368203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363534312E3937383232372D36353231362D3236313935393935373939323232392F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636542.248:13438): pid=65682 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636542.252:13439): pid=65682 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636543.992:13440): pid=65682 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636543.992:13441): pid=65682 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636543.995:13442): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636543.995:13443): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636544.009:13444): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636544.009:13445): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636544.011:13446): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=65743 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636544.050:13447): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636544.050:13448): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636544.337:13449): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636544.337:13450): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636544.338:13451): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=65778 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636544.371:13452): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636544.371:13453): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636544.386:13454): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636544.386:13455): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636544.388:13456): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=65792 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636544.418:13457): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636544.418:13458): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636544.438:13459): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636544.438:13460): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636544.439:13461): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=65813 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636544.481:13462): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636544.483:13463): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636544.496:13464): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636544.496:13465): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636544.497:13466): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=65840 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636544.520:13467): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636544.520:13468): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636544.536:13469): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636544.536:13470): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636544.538:13471): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=65871 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636544.617:13472): pid=65890 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636544.617:13473): pid=65890 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F767161737A6B786A6979797364676F73767379637A67756E6B62756C696E65203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363534342E333734353538322D36353231362D3236393230333632353130393830302F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636544.617:13474): pid=65890 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636544.621:13475): pid=65890 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636554.156:13476): pid=65890 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636554.156:13477): pid=65890 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636554.159:13478): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636554.159:13479): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636554.171:13480): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636554.171:13481): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636554.172:13482): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=66236 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636554.199:13483): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636554.199:13484): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636554.567:13485): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636554.567:13486): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636554.568:13487): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=66251 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636554.602:13488): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636554.602:13489): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636554.615:13490): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636554.615:13491): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636554.619:13492): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=66265 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636554.641:13493): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636554.641:13494): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636554.662:13495): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636554.663:13496): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636554.664:13497): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=66286 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636554.703:13498): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636554.703:13499): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636554.716:13500): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636554.717:13501): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636554.718:13502): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=66300 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636554.744:13503): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636554.744:13504): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636554.756:13505): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636554.756:13506): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636554.757:13507): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=66315 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636554.818:13508): pid=66330 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636554.818:13509): pid=66330 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D706172656B616D786D717A67766E70797973677876676A616B6C796E63697373203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363535342E363035323439322D36353231362D3135383832303637363231333036322F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636554.818:13510): pid=66330 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636554.821:13511): pid=66330 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636555.119:13512): pid=66330 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636555.119:13513): pid=66330 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636555.122:13514): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636555.122:13515): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636555.134:13516): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636555.135:13517): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636555.136:13518): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=66374 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636555.164:13519): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636555.164:13520): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636555.501:13521): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636555.501:13522): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636555.502:13523): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=66397 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636555.523:13524): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636555.523:13525): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636555.535:13526): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636555.535:13527): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636555.537:13528): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=66411 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636555.560:13529): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636555.560:13530): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636555.578:13531): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636555.578:13532): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636555.579:13533): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=66432 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636555.611:13534): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636555.611:13535): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636555.621:13536): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636555.621:13537): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636555.622:13538): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=66446 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636555.640:13539): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636555.640:13540): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636555.651:13541): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636555.651:13542): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636555.653:13543): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=66461 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636555.703:13544): pid=66476 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636555.703:13545): pid=66476 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D71687474766D74776F7A6778727468626D68647961747166636C61756B77616D203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363535352E353236383439372D36363339322D34323231353634323131323530392F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636555.703:13546): pid=66476 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636555.706:13547): pid=66476 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636555.878:13548): pid=66476 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636555.878:13549): pid=66476 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636555.880:13550): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636555.881:13551): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636555.892:13552): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636555.893:13553): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636555.895:13554): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=66485 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636555.927:13555): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636555.927:13556): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636556.438:13557): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636556.438:13558): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636556.439:13559): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=66508 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636556.457:13560): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636556.457:13561): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636556.468:13562): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636556.468:13563): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636556.470:13564): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=66522 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636556.496:13565): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636556.496:13566): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636556.614:13567): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636556.614:13568): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636556.615:13569): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=66543 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636556.657:13570): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636556.657:13571): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636556.671:13572): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636556.671:13573): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636556.673:13574): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=66557 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636556.695:13575): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636556.695:13576): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636556.706:13577): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636556.707:13578): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636556.708:13579): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=66572 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636556.764:13580): pid=66587 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636556.765:13581): pid=66587 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D786268657A6B666D7561616775716C79766171756D697A78616378637575616D203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363535362E343630323032322D36363530362D333233353134313635353935362F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636556.766:13582): pid=66587 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636556.767:13583): pid=66587 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636556.933:13584): pid=66587 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636556.933:13585): pid=66587 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636556.936:13586): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636556.936:13587): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636556.951:13588): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636556.951:13589): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636556.952:13590): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=66592 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636556.978:13591): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636556.978:13592): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636556.989:13593): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636556.989:13594): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636556.990:13595): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=66606 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636557.012:13596): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636557.012:13597): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636557.031:13598): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636557.031:13599): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636557.032:13600): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=66622 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636557.075:13601): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636557.075:13602): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636557.088:13603): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636557.088:13604): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636557.091:13605): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=66636 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636557.113:13606): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636557.113:13607): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636557.126:13608): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636557.126:13609): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636557.130:13610): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=66651 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636557.207:13611): pid=66666 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636557.207:13612): pid=66666 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D66677A796A7668726B6E6A766A757867727871617A6B6473696B796475626A70203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363535362E343630323032322D36363530362D333233353134313635353935362F416E736962616C6C5A5F636F70792E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636557.208:13613): pid=66666 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636557.210:13614): pid=66666 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636557.382:13615): pid=66666 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636557.382:13616): pid=66666 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636557.385:13617): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636557.385:13618): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636557.399:13619): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636557.399:13620): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636557.400:13621): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=66672 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636557.421:13622): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636557.421:13623): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636557.721:13624): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636557.721:13625): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636557.722:13626): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=66720 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636557.745:13627): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636557.745:13628): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636557.758:13629): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636557.758:13630): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636557.759:13631): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=66734 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636557.785:13632): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636557.785:13633): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636557.802:13634): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636557.802:13635): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636557.803:13636): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=66755 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636557.834:13637): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636557.834:13638): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636557.853:13639): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636557.853:13640): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636557.854:13641): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=66769 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636557.873:13642): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636557.873:13643): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636557.889:13644): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636557.889:13645): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636557.890:13646): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=66784 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636557.946:13647): pid=66799 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636557.946:13648): pid=66799 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D78696C6C736675686E6B6B656F65627770727A63736361776B6C73746C72796E203B2068747470735F70726F78793D272720687474705F70726F78793D272720444F434B45525F434C49454E545F54494D454F55543D31323020434F4D504F53455F485454505F54494D454F55543D313230202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363535372E373438323539382D36363638372D37363634393939363834343631382F416E736962616C6C5A5F646F636B65725F636F6D706F73652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636557.947:13649): pid=66799 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636557.949:13650): pid=66799 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=BPF msg=audit(1744636559.215:13651): prog-id=435 op=LOAD type=BPF msg=audit(1744636559.217:13652): prog-id=436 op=LOAD type=SYSCALL msg=audit(1744636559.217:13652): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001a3ad0 a2=90 a3=0 items=0 ppid=66841 pid=66853 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636559.217:13652): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37653261666364383331313737363531626339633238346633 type=BPF msg=audit(1744636559.218:13653): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636559.219:13654): prog-id=437 op=LOAD type=SYSCALL msg=audit(1744636559.219:13654): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001a3c48 a2=90 a3=0 items=0 ppid=66841 pid=66853 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636559.219:13654): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37653261666364383331313737363531626339633238346633 type=BPF msg=audit(1744636559.219:13655): prog-id=438 op=LOAD type=SYSCALL msg=audit(1744636559.219:13655): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001a39d8 a2=90 a3=0 items=0 ppid=66841 pid=66853 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636559.219:13655): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37653261666364383331313737363531626339633238346633 type=BPF msg=audit(1744636559.219:13656): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636559.219:13657): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636559.220:13658): prog-id=439 op=LOAD type=SYSCALL msg=audit(1744636559.220:13658): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001a3eb0 a2=90 a3=0 items=0 ppid=66841 pid=66853 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636559.220:13658): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37653261666364383331313737363531626339633238346633 type=BPF msg=audit(1744636559.252:13659): prog-id=440 op=LOAD type=SYSCALL msg=audit(1744636559.252:13659): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001c1c48 a2=90 a3=0 items=0 ppid=66873 pid=66885 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636559.252:13659): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64386234353334396630383438626236326238323530376133 type=BPF msg=audit(1744636559.252:13660): prog-id=441 op=LOAD type=SYSCALL msg=audit(1744636559.252:13660): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c0001c19d8 a2=90 a3=0 items=0 ppid=66873 pid=66885 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636559.252:13660): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64386234353334396630383438626236326238323530376133 type=BPF msg=audit(1744636559.252:13661): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636559.252:13662): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636559.252:13663): prog-id=442 op=LOAD type=SYSCALL msg=audit(1744636559.252:13663): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001c1eb0 a2=90 a3=0 items=0 ppid=66873 pid=66885 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636559.252:13663): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64386234353334396630383438626236326238323530376133 type=BPF msg=audit(1744636559.492:13664): prog-id=443 op=LOAD type=BPF msg=audit(1744636559.493:13665): prog-id=444 op=LOAD type=SYSCALL msg=audit(1744636559.493:13665): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000239ad0 a2=90 a3=0 items=0 ppid=67110 pid=67140 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636559.493:13665): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65303665666630623261633063656235353730343932646136 type=BPF msg=audit(1744636559.494:13666): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636559.494:13667): prog-id=445 op=LOAD type=SYSCALL msg=audit(1744636559.494:13667): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000239c48 a2=90 a3=0 items=0 ppid=67110 pid=67140 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636559.494:13667): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65303665666630623261633063656235353730343932646136 type=BPF msg=audit(1744636559.494:13668): prog-id=446 op=LOAD type=SYSCALL msg=audit(1744636559.494:13668): arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=c0002399d8 a2=90 a3=0 items=0 ppid=67110 pid=67140 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636559.494:13668): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65303665666630623261633063656235353730343932646136 type=BPF msg=audit(1744636559.494:13669): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636559.495:13670): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636559.495:13671): prog-id=447 op=LOAD type=SYSCALL msg=audit(1744636559.495:13671): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000239eb0 a2=90 a3=0 items=0 ppid=67110 pid=67140 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636559.495:13671): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65303665666630623261633063656235353730343932646136 type=BPF msg=audit(1744636559.522:13672): prog-id=448 op=LOAD type=BPF msg=audit(1744636559.529:13673): prog-id=449 op=LOAD type=SYSCALL msg=audit(1744636559.529:13673): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000239ad0 a2=90 a3=0 items=0 ppid=67111 pid=67182 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636559.529:13673): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33653231663962373861626161353733623465363531643764 type=BPF msg=audit(1744636559.531:13674): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636559.531:13675): prog-id=450 op=LOAD type=SYSCALL msg=audit(1744636559.531:13675): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000239c48 a2=90 a3=0 items=0 ppid=67111 pid=67182 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636559.531:13675): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33653231663962373861626161353733623465363531643764 type=BPF msg=audit(1744636559.532:13676): prog-id=451 op=LOAD type=SYSCALL msg=audit(1744636559.532:13676): arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=c0002399d8 a2=90 a3=0 items=0 ppid=67111 pid=67182 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636559.532:13676): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33653231663962373861626161353733623465363531643764 type=BPF msg=audit(1744636559.533:13677): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636559.533:13678): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636559.533:13679): prog-id=452 op=LOAD type=SYSCALL msg=audit(1744636559.533:13679): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000239eb0 a2=90 a3=0 items=0 ppid=67111 pid=67182 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636559.533:13679): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33653231663962373861626161353733623465363531643764 type=BPF msg=audit(1744636559.550:13680): prog-id=453 op=LOAD type=BPF msg=audit(1744636559.553:13681): prog-id=454 op=LOAD type=SYSCALL msg=audit(1744636559.553:13681): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001c3ad0 a2=90 a3=0 items=0 ppid=67173 pid=67202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636559.553:13681): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34616139313133666339633366616263623036336564643730 type=BPF msg=audit(1744636559.553:13682): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636559.553:13683): prog-id=455 op=LOAD type=SYSCALL msg=audit(1744636559.553:13683): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001c3c48 a2=90 a3=0 items=0 ppid=67173 pid=67202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636559.553:13683): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34616139313133666339633366616263623036336564643730 type=BPF msg=audit(1744636559.554:13684): prog-id=456 op=LOAD type=SYSCALL msg=audit(1744636559.554:13684): arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=c0001c39d8 a2=90 a3=0 items=0 ppid=67173 pid=67202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636559.554:13684): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34616139313133666339633366616263623036336564643730 type=BPF msg=audit(1744636559.554:13685): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636559.554:13686): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636559.554:13687): prog-id=457 op=LOAD type=SYSCALL msg=audit(1744636559.554:13687): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001c3eb0 a2=90 a3=0 items=0 ppid=67173 pid=67202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636559.554:13687): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34616139313133666339633366616263623036336564643730 type=USER_END msg=audit(1744636559.757:13688): pid=66799 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636559.758:13689): pid=66799 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636559.762:13690): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636559.763:13691): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636559.776:13692): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636559.776:13693): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636559.777:13694): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=67515 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636559.803:13695): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636559.803:13696): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=BPF msg=audit(1744636560.203:13697): prog-id=0 op=UNLOAD type=USER_LOGIN msg=audit(1744636560.563:13698): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636560.563:13699): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636560.564:13700): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=67914 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636560.622:13701): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636560.622:13702): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636560.637:13703): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636560.638:13704): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636560.639:13705): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=67949 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636560.685:13706): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636560.685:13707): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636560.710:13708): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636560.710:13709): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636560.711:13710): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=67991 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636560.771:13711): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636560.771:13712): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636560.797:13713): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636560.797:13714): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636560.798:13715): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=68041 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636560.827:13716): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636560.827:13717): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636560.840:13718): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636560.840:13719): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636560.841:13720): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=68074 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636560.914:13721): pid=68104 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636560.914:13722): pid=68104 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A6C6B66746968686D6879747868616C6E707A66726767707072737473706676203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363536302E363235343133322D36373733312D3139363933363339303234363830392F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636560.917:13723): pid=68104 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636560.920:13724): pid=68104 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636561.257:13725): pid=68104 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636561.257:13726): pid=68104 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636561.260:13727): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636561.260:13728): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636561.274:13729): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636561.274:13730): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636561.278:13731): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=68219 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636561.312:13732): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636561.312:13733): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636561.616:13734): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636561.616:13735): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636561.617:13736): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=68241 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636561.636:13737): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636561.636:13738): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636561.653:13739): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636561.653:13740): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636561.654:13741): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=68255 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636561.697:13742): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636561.697:13743): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636561.719:13744): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636561.719:13745): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636561.721:13746): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=68276 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636561.779:13747): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636561.779:13748): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636561.796:13749): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636561.796:13750): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636561.797:13751): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=68290 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636561.840:13752): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636561.840:13753): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636561.857:13754): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636561.860:13755): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636561.861:13756): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=68305 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636561.962:13757): pid=68320 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636561.963:13758): pid=68320 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D757A6E6A6269736E616D6A706966786A7873637375636F6A6473797771616B73203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363536312E3633393838342D36373733312D3134353736353337323138373933312F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636561.963:13759): pid=68320 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636561.965:13760): pid=68320 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636562.290:13761): pid=68320 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636562.290:13762): pid=68320 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636562.293:13763): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636562.293:13764): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636562.306:13765): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636562.306:13766): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636562.308:13767): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=68335 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636562.343:13768): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636562.343:13769): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636562.633:13770): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636562.634:13771): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636562.635:13772): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=68355 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636562.673:13773): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636562.673:13774): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636562.685:13775): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636562.685:13776): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636562.686:13777): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=68369 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636562.709:13778): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636562.709:13779): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636562.727:13780): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636562.727:13781): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636562.729:13782): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=68390 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636562.779:13783): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636562.779:13784): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636562.792:13785): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636562.793:13786): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636562.794:13787): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=68404 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636562.825:13788): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636562.825:13789): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636562.840:13790): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636562.840:13791): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636562.842:13792): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=68423 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636562.915:13793): pid=68438 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636562.915:13794): pid=68438 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D716578766F74646C7A616F6F776C6867766D78636F67706B766A6977717A6977203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363536322E3637343939332D36373733312D39333238333533353634393939352F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636562.915:13795): pid=68438 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636562.917:13796): pid=68438 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636565.288:13797): pid=68438 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636565.288:13798): pid=68438 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636565.293:13799): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636565.293:13800): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636565.306:13801): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636565.306:13802): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636565.307:13803): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=68539 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636565.335:13804): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636565.335:13805): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636565.624:13806): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636565.624:13807): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636565.626:13808): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=68566 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636565.652:13809): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636565.652:13810): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636565.663:13811): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636565.663:13812): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636565.665:13813): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=68583 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636565.690:13814): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636565.690:13815): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636565.707:13816): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636565.707:13817): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636565.707:13818): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=68606 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636565.745:13819): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636565.745:13820): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636565.765:13821): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636565.765:13822): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636565.768:13823): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=68620 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636565.796:13824): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636565.796:13825): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636565.809:13826): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636565.809:13827): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636565.811:13828): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=68636 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636565.864:13829): pid=68651 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636565.865:13830): pid=68651 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E6C62776D736A617676676B6864786B7A7176697564717562766F646F6E6475203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363536352E363534333230322D36373733312D33333237333738393239343732342F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636565.865:13831): pid=68651 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636565.867:13832): pid=68651 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636566.424:13833): pid=68651 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636566.424:13834): pid=68651 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636566.427:13835): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636566.427:13836): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636566.438:13837): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636566.438:13838): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636566.439:13839): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=68691 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636566.461:13840): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636566.461:13841): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636566.795:13842): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636566.795:13843): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636566.796:13844): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=68706 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636566.822:13845): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636566.822:13846): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636566.833:13847): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636566.833:13848): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636566.834:13849): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=68720 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636566.861:13850): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636566.862:13851): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636566.885:13852): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636566.885:13853): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636566.887:13854): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=68741 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636566.946:13855): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636566.946:13856): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636566.958:13857): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636566.961:13858): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636566.962:13859): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=68755 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636566.984:13860): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636566.985:13861): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636566.999:13862): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636566.999:13863): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636567.001:13864): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=68770 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636567.077:13865): pid=68785 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636567.077:13866): pid=68785 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D68706F77697763616E716B736A6F7779697264776F657265677A6B6B63707A6D203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363536362E383233363537382D36373733312D3132383930323939333438383530342F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636567.078:13867): pid=68785 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636567.081:13868): pid=68785 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636567.402:13869): pid=68785 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636567.403:13870): pid=68785 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636567.405:13871): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636567.406:13872): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636567.419:13873): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636567.420:13874): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636567.421:13875): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=68800 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636567.447:13876): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636567.447:13877): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636567.746:13878): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636567.747:13879): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636567.748:13880): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=68816 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636567.773:13881): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636567.773:13882): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636567.785:13883): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636567.785:13884): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636567.787:13885): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=68830 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636567.812:13886): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636567.812:13887): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636567.829:13888): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636567.829:13889): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636567.833:13890): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=68851 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636567.876:13891): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636567.877:13892): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636567.889:13893): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636567.889:13894): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636567.890:13895): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=68865 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636567.911:13896): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636567.911:13897): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636567.924:13898): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636567.927:13899): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636567.928:13900): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=68880 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636567.999:13901): pid=68895 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636568.000:13902): pid=68895 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E686974617377707062657373796F7464777377746D6463696D64786A777074203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363536372E373735343738312D36383831342D38343531313233303039303233332F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636568.000:13903): pid=68895 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636568.004:13904): pid=68895 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636568.179:13905): pid=68895 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636568.181:13906): pid=68895 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636568.184:13907): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636568.184:13908): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636568.196:13909): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636568.196:13910): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636568.198:13911): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=68899 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636568.232:13912): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636568.232:13913): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636568.496:13914): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636568.496:13915): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636568.498:13916): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=68916 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636568.520:13917): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636568.520:13918): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636568.536:13919): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636568.536:13920): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636568.537:13921): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=68930 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636568.571:13922): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636568.571:13923): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636568.708:13924): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636568.708:13925): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636568.711:13926): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=68951 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636568.755:13927): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636568.755:13928): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636568.767:13929): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636568.767:13930): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636568.771:13931): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=68966 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636568.789:13932): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636568.789:13933): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636568.800:13934): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636568.801:13935): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636568.802:13936): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=68982 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636568.857:13937): pid=68997 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636568.858:13938): pid=68997 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7561746B66746F6E6769647A6C706869646D66636267617870716A7668786C68203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363536382E353231343338342D36383931342D3238303535323733353336303439372F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636568.858:13939): pid=68997 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636568.863:13940): pid=68997 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636569.046:13941): pid=68997 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636569.047:13942): pid=68997 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636569.054:13943): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636569.054:13944): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636569.070:13945): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636569.070:13946): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636569.073:13947): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=69002 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636569.109:13948): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636569.109:13949): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636569.122:13950): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636569.122:13951): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636569.124:13952): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=69016 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636569.150:13953): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636569.150:13954): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636569.170:13955): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636569.170:13956): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636569.173:13957): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=69032 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636569.223:13958): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636569.223:13959): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636569.239:13960): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636569.239:13961): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636569.241:13962): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=69046 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636569.284:13963): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636569.284:13964): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636569.297:13965): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636569.297:13966): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636569.299:13967): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=69061 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636569.366:13968): pid=69076 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636569.366:13969): pid=69076 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D77627A79657562736F6667626F6475626F706D696F767973677A686B79647A72203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363536382E353231343338342D36383931342D3238303535323733353336303439372F416E736962616C6C5A5F636F70792E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636569.367:13970): pid=69076 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636569.368:13971): pid=69076 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636569.563:13972): pid=69076 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636569.563:13973): pid=69076 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636569.566:13974): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636569.567:13975): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636569.579:13976): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636569.579:13977): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636569.580:13978): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=69080 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636569.604:13979): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636569.604:13980): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636569.870:13981): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636569.870:13982): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636569.871:13983): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=69097 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636569.910:13984): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636569.910:13985): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636569.920:13986): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636569.920:13987): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636569.922:13988): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=69111 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636569.965:13989): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636569.965:13990): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636569.991:13991): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636569.991:13992): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636569.993:13993): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=69132 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636570.058:13994): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636570.061:13995): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636570.073:13996): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636570.073:13997): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636570.074:13998): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=69146 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636570.115:13999): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636570.115:14000): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636570.126:14001): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636570.126:14002): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636570.129:14003): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=69161 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636570.201:14004): pid=69176 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636570.201:14005): pid=69176 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C6F68627668706F7A746875656474647969736369706B66666C656663686574203B2068747470735F70726F78793D272720687474705F70726F78793D272720444F434B45525F434C49454E545F54494D454F55543D31323020434F4D504F53455F485454505F54494D454F55543D313230202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363536392E393037383635352D36393039352D3133303435313631323432373938352F416E736962616C6C5A5F646F636B65725F636F6D706F73652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636570.202:14006): pid=69176 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636570.207:14007): pid=69176 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=BPF msg=audit(1744636571.385:14008): prog-id=458 op=LOAD type=SYSCALL msg=audit(1744636571.385:14008): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001a3c48 a2=90 a3=0 items=0 ppid=69213 pid=69224 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636571.385:14008): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36326132356331656264356233663162343066643339656166 type=BPF msg=audit(1744636571.385:14009): prog-id=459 op=LOAD type=SYSCALL msg=audit(1744636571.385:14009): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c0001a39d8 a2=90 a3=0 items=0 ppid=69213 pid=69224 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636571.385:14009): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36326132356331656264356233663162343066643339656166 type=BPF msg=audit(1744636571.385:14010): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636571.385:14011): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636571.385:14012): prog-id=460 op=LOAD type=SYSCALL msg=audit(1744636571.385:14012): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001a3eb0 a2=90 a3=0 items=0 ppid=69213 pid=69224 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636571.385:14012): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36326132356331656264356233663162343066643339656166 type=BPF msg=audit(1744636571.699:14013): prog-id=461 op=LOAD type=BPF msg=audit(1744636571.701:14014): prog-id=462 op=LOAD type=SYSCALL msg=audit(1744636571.701:14014): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000243ad0 a2=90 a3=0 items=0 ppid=69350 pid=69365 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636571.701:14014): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35333039366536373337653838326566613563613766363633 type=BPF msg=audit(1744636571.701:14015): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636571.701:14016): prog-id=463 op=LOAD type=SYSCALL msg=audit(1744636571.701:14016): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000243c48 a2=90 a3=0 items=0 ppid=69350 pid=69365 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636571.701:14016): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35333039366536373337653838326566613563613766363633 type=BPF msg=audit(1744636571.702:14017): prog-id=464 op=LOAD type=SYSCALL msg=audit(1744636571.702:14017): arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=c0002439d8 a2=90 a3=0 items=0 ppid=69350 pid=69365 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636571.702:14017): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35333039366536373337653838326566613563613766363633 type=BPF msg=audit(1744636571.702:14018): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636571.702:14019): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636571.702:14020): prog-id=465 op=LOAD type=SYSCALL msg=audit(1744636571.702:14020): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000243eb0 a2=90 a3=0 items=0 ppid=69350 pid=69365 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636571.702:14020): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35333039366536373337653838326566613563613766363633 type=BPF msg=audit(1744636571.854:14021): prog-id=466 op=LOAD type=BPF msg=audit(1744636571.856:14022): prog-id=467 op=LOAD type=SYSCALL msg=audit(1744636571.856:14022): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001c3ad0 a2=90 a3=0 items=0 ppid=69422 pid=69464 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636571.856:14022): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38303433316261376663653036633931343063353134393735 type=BPF msg=audit(1744636571.857:14023): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636571.857:14024): prog-id=468 op=LOAD type=SYSCALL msg=audit(1744636571.857:14024): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001c3c48 a2=90 a3=0 items=0 ppid=69422 pid=69464 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636571.857:14024): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38303433316261376663653036633931343063353134393735 type=BPF msg=audit(1744636571.858:14025): prog-id=469 op=LOAD type=SYSCALL msg=audit(1744636571.858:14025): arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=c0001c39d8 a2=90 a3=0 items=0 ppid=69422 pid=69464 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636571.858:14025): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38303433316261376663653036633931343063353134393735 type=BPF msg=audit(1744636571.858:14026): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636571.858:14027): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636571.858:14028): prog-id=470 op=LOAD type=SYSCALL msg=audit(1744636571.858:14028): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001c3eb0 a2=90 a3=0 items=0 ppid=69422 pid=69464 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636571.858:14028): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38303433316261376663653036633931343063353134393735 type=BPF msg=audit(1744636571.892:14029): prog-id=471 op=LOAD type=BPF msg=audit(1744636571.893:14030): prog-id=472 op=LOAD type=SYSCALL msg=audit(1744636571.893:14030): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000241ad0 a2=90 a3=0 items=0 ppid=69466 pid=69541 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636571.893:14030): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63343335616461353735356434636333363738363333373530 type=BPF msg=audit(1744636571.894:14031): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636571.894:14032): prog-id=473 op=LOAD type=SYSCALL msg=audit(1744636571.894:14032): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000241c48 a2=90 a3=0 items=0 ppid=69466 pid=69541 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636571.894:14032): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63343335616461353735356434636333363738363333373530 type=BPF msg=audit(1744636571.894:14033): prog-id=474 op=LOAD type=SYSCALL msg=audit(1744636571.894:14033): arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=c0002419d8 a2=90 a3=0 items=0 ppid=69466 pid=69541 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636571.894:14033): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63343335616461353735356434636333363738363333373530 type=BPF msg=audit(1744636571.894:14034): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636571.894:14035): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636571.894:14036): prog-id=475 op=LOAD type=SYSCALL msg=audit(1744636571.894:14036): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000241eb0 a2=90 a3=0 items=0 ppid=69466 pid=69541 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636571.894:14036): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63343335616461353735356434636333363738363333373530 type=BPF msg=audit(1744636571.898:14037): prog-id=476 op=LOAD type=BPF msg=audit(1744636571.901:14038): prog-id=477 op=LOAD type=SYSCALL msg=audit(1744636571.901:14038): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001b9ad0 a2=90 a3=0 items=0 ppid=69435 pid=69508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636571.901:14038): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66616566313437373238396338363839666139643761383233 type=BPF msg=audit(1744636571.901:14039): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636571.901:14040): prog-id=478 op=LOAD type=SYSCALL msg=audit(1744636571.901:14040): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001b9c48 a2=90 a3=0 items=0 ppid=69435 pid=69508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636571.901:14040): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66616566313437373238396338363839666139643761383233 type=BPF msg=audit(1744636571.901:14041): prog-id=479 op=LOAD type=SYSCALL msg=audit(1744636571.901:14041): arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=c0001b99d8 a2=90 a3=0 items=0 ppid=69435 pid=69508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636571.901:14041): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66616566313437373238396338363839666139643761383233 type=BPF msg=audit(1744636571.901:14042): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636571.901:14043): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636571.901:14044): prog-id=480 op=LOAD type=SYSCALL msg=audit(1744636571.901:14044): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001b9eb0 a2=90 a3=0 items=0 ppid=69435 pid=69508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636571.901:14044): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66616566313437373238396338363839666139643761383233 type=USER_END msg=audit(1744636572.111:14045): pid=69176 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636572.111:14046): pid=69176 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636572.115:14047): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636572.115:14048): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636572.128:14049): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636572.128:14050): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636572.129:14051): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=69892 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636572.158:14052): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636572.158:14053): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=BPF msg=audit(1744636572.326:14054): prog-id=0 op=UNLOAD type=USER_LOGIN msg=audit(1744636572.935:14055): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636572.935:14056): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636572.937:14057): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=70105 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636572.959:14058): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636572.959:14059): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636572.971:14060): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636572.971:14061): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636572.972:14062): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=70119 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636573.008:14063): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636573.009:14064): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636573.025:14065): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636573.026:14066): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636573.027:14067): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=70140 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636573.061:14068): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636573.061:14069): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636573.076:14070): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636573.076:14071): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636573.078:14072): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=70154 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636573.103:14073): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636573.103:14074): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636573.118:14075): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636573.118:14076): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636573.121:14077): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=70169 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636573.207:14078): pid=70184 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636573.207:14079): pid=70184 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D697179716173676C717A7662646E676F6B766F707A6A776C64776A76696E7475203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363537322E393630383937342D37303039382D3237383338383339373931323233322F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636573.208:14080): pid=70184 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636573.211:14081): pid=70184 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636575.136:14082): pid=70184 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636575.138:14083): pid=70184 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636575.142:14084): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636575.142:14085): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636575.153:14086): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636575.153:14087): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636575.155:14088): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=70210 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636575.187:14089): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636575.187:14090): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636575.523:14091): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636575.523:14092): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636575.525:14093): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=70244 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636575.544:14094): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636575.544:14095): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636575.557:14096): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636575.557:14097): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636575.558:14098): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=70258 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636575.588:14099): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636575.588:14100): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636575.613:14101): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636575.613:14102): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636575.614:14103): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=70280 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636575.650:14104): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636575.650:14105): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636575.662:14106): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636575.662:14107): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636575.664:14108): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=70295 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636575.696:14109): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636575.696:14110): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636575.703:14111): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636575.703:14112): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636575.704:14113): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=70310 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636575.773:14114): pid=70325 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636575.774:14115): pid=70325 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D75676A6C686E7470627379676366696B68656472776E696F7977796C6A646271203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363537352E353435333431352D37303232352D3233333333383030343633363436372F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636575.776:14116): pid=70325 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636575.779:14117): pid=70325 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636575.966:14118): pid=70325 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636575.967:14119): pid=70325 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636575.970:14120): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636575.971:14121): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636575.983:14122): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636575.983:14123): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636575.984:14124): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=70329 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636576.016:14125): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636576.016:14126): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636576.311:14127): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636576.312:14128): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636576.313:14129): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=70346 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636576.334:14130): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636576.335:14131): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636576.349:14132): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636576.350:14133): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636576.351:14134): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=70360 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636576.380:14135): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636576.380:14136): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636576.398:14137): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636576.398:14138): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636576.399:14139): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=70381 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636576.432:14140): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636576.432:14141): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636576.444:14142): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636576.444:14143): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636576.445:14144): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=70395 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636576.466:14145): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636576.466:14146): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636576.477:14147): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636576.478:14148): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636576.479:14149): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=70410 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636576.536:14150): pid=70425 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636576.537:14151): pid=70425 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D71707778716A63656B6A73726D736C627775676F78657678657374656D6A7878203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363537362E333336393031372D37303334342D34383538343437343434313136302F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636576.537:14152): pid=70425 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636576.538:14153): pid=70425 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636576.707:14154): pid=70425 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636576.707:14155): pid=70425 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636576.710:14156): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636576.710:14157): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636576.722:14158): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636576.722:14159): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636576.724:14160): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=70429 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636576.748:14161): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636576.748:14162): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636577.072:14163): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636577.072:14164): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636577.073:14165): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=70486 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636577.094:14166): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636577.094:14167): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636577.106:14168): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636577.106:14169): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636577.107:14170): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=70511 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636577.140:14171): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636577.140:14172): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636577.158:14173): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636577.158:14174): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636577.160:14175): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=70532 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636577.200:14176): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636577.200:14177): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636577.215:14178): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636577.215:14179): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636577.219:14180): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=70559 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636577.244:14181): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636577.244:14182): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636577.255:14183): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636577.256:14184): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636577.257:14185): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=70577 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636577.323:14186): pid=70601 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636577.324:14187): pid=70601 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D65686269667577706C6B6978706C6A716F6D74696F6175627273687063636670203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363537372E3039363037332D37303434362D3237343431353936353930333138342F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636577.324:14188): pid=70601 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636577.326:14189): pid=70601 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636577.519:14190): pid=70601 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636577.519:14191): pid=70601 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636577.521:14192): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636577.521:14193): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636577.534:14194): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636577.534:14195): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636577.535:14196): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=70633 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636577.563:14197): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636577.563:14198): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636577.932:14199): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636577.934:14200): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636577.937:14201): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=70653 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636577.964:14202): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636577.964:14203): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636577.976:14204): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636577.976:14205): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636577.977:14206): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=70668 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636578.031:14207): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636578.031:14208): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636578.074:14209): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636578.074:14210): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636578.075:14211): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=70689 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636578.126:14212): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636578.126:14213): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636578.140:14214): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636578.140:14215): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636578.142:14216): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=70703 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636578.169:14217): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636578.169:14218): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636578.180:14219): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636578.180:14220): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636578.181:14221): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=70718 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636578.241:14222): pid=70733 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636578.241:14223): pid=70733 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D77637A6E69647471786C6971617A6969666E626971626E786A6E706274776875203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363537372E393635373637312D37303634382D3132313830343039383239353635392F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636578.242:14224): pid=70733 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636578.244:14225): pid=70733 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636578.440:14226): pid=70733 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636578.440:14227): pid=70733 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636578.442:14228): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636578.444:14229): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636578.455:14230): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636578.455:14231): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636578.456:14232): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=70737 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636578.494:14233): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636578.494:14234): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636578.711:14235): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636578.711:14236): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636578.713:14237): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=70753 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636578.757:14238): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636578.757:14239): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636578.769:14240): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636578.769:14241): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636578.770:14242): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=70767 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636578.804:14243): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636578.805:14244): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636578.831:14245): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636578.833:14246): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636578.834:14247): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=70788 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636578.896:14248): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636578.896:14249): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636578.912:14250): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636578.912:14251): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636578.915:14252): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=70802 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636578.957:14253): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636578.957:14254): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636578.970:14255): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636578.970:14256): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636578.971:14257): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=70817 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636579.072:14258): pid=70832 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636579.072:14259): pid=70832 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D716676756D686D756E737179746A6F746B7461656777716D727376746E717578203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363537382E373538313335382D37303634382D36373233333632353630303131332F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636579.075:14260): pid=70832 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636579.086:14261): pid=70832 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636579.292:14262): pid=70832 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636579.292:14263): pid=70832 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636579.303:14264): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636579.303:14265): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636579.321:14266): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636579.321:14267): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636579.323:14268): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=70836 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636579.354:14269): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636579.355:14270): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636579.599:14271): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636579.600:14272): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636579.601:14273): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=70851 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636579.633:14274): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636579.633:14275): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636579.642:14276): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636579.642:14277): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636579.644:14278): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=70865 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636579.685:14279): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636579.685:14280): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636579.707:14281): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636579.707:14282): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636579.710:14283): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=70886 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636579.758:14284): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636579.761:14285): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636579.776:14286): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636579.776:14287): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636579.779:14288): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=70900 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636579.814:14289): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636579.814:14290): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636579.827:14291): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636579.827:14292): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636579.831:14293): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=70917 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636579.915:14294): pid=70934 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636579.916:14295): pid=70934 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D70746F656E6C6E796669676E716A646F65747462767A797777716B626A7A776F203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363537392E363331313235322D37303634382D37333631363130343430393333322F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636579.916:14296): pid=70934 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636579.918:14297): pid=70934 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636580.097:14298): pid=70934 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636580.097:14299): pid=70934 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636580.106:14300): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636580.106:14301): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636580.120:14302): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636580.120:14303): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636580.124:14304): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=70938 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636580.141:14305): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636580.141:14306): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636580.340:14307): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636580.340:14308): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636580.341:14309): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=70953 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636580.374:14310): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636580.374:14311): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636580.384:14312): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636580.384:14313): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636580.388:14314): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=70967 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636580.426:14315): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636580.426:14316): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636580.448:14317): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636580.448:14318): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636580.451:14319): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=70988 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636580.502:14320): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636580.502:14321): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636580.517:14322): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636580.517:14323): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636580.518:14324): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=71002 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636580.547:14325): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636580.547:14326): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636580.563:14327): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636580.563:14328): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636580.564:14329): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=71017 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636580.640:14330): pid=71032 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636580.640:14331): pid=71032 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7173747770796A6B6B79797A6770756B67776A79766C766676706D78617A6972203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363538302E333735393536382D37303634382D3132323334323832333937343131362F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636580.640:14332): pid=71032 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636580.643:14333): pid=71032 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636580.840:14334): pid=71032 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636580.841:14335): pid=71032 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636580.846:14336): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636580.846:14337): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636580.857:14338): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636580.857:14339): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636580.859:14340): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=71036 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636580.882:14341): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636580.882:14342): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636581.119:14343): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636581.119:14344): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636581.120:14345): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=71052 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636581.158:14346): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636581.158:14347): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636581.171:14348): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636581.171:14349): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636581.172:14350): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=71066 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636581.212:14351): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636581.212:14352): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636581.230:14353): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636581.230:14354): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636581.231:14355): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=71087 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636581.287:14356): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636581.287:14357): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636581.304:14358): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636581.304:14359): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636581.307:14360): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=71101 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636581.335:14361): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636581.335:14362): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636581.350:14363): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636581.350:14364): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636581.352:14365): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=71116 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636581.407:14366): pid=71131 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636581.407:14367): pid=71131 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7265776473786D707A68636A7574647A7868616B6B756F7A7A6A6E7766626C69203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363538312E3136303439332D37303634382D3134383935383035323536343238382F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636581.408:14368): pid=71131 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636581.409:14369): pid=71131 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636581.579:14370): pid=71131 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636581.580:14371): pid=71131 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636581.584:14372): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636581.584:14373): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636581.595:14374): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636581.595:14375): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636581.596:14376): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=71135 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636581.632:14377): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636581.632:14378): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636581.928:14379): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636581.929:14380): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636581.930:14381): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=71153 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636581.951:14382): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636581.952:14383): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636581.964:14384): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636581.964:14385): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636581.965:14386): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=71167 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636582.007:14387): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636582.007:14388): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636582.024:14389): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636582.024:14390): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636582.026:14391): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=71188 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636582.081:14392): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636582.081:14393): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636582.092:14394): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636582.093:14395): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636582.094:14396): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=71202 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636582.120:14397): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636582.121:14398): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636582.131:14399): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636582.131:14400): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636582.135:14401): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=71217 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636582.204:14402): pid=71232 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636582.204:14403): pid=71232 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D76686E6E717268627575686E69726966697A6B68756C6C7666637273756563203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363538312E393535303331362D37303634382D3138313133323039373232333532332F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636582.204:14404): pid=71232 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636582.207:14405): pid=71232 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636582.386:14406): pid=71232 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636582.386:14407): pid=71232 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636582.392:14408): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636582.392:14409): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636582.406:14410): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636582.406:14411): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636582.408:14412): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=71236 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636582.445:14413): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636582.445:14414): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636582.707:14415): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636582.707:14416): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636582.708:14417): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=71252 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636582.733:14418): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636582.733:14419): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636582.743:14420): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636582.743:14421): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636582.746:14422): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=71266 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636582.772:14423): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636582.773:14424): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636582.792:14425): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636582.792:14426): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636582.795:14427): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=71287 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636582.830:14428): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636582.830:14429): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636582.843:14430): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636582.843:14431): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636582.844:14432): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=71301 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636582.875:14433): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636582.875:14434): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636582.884:14435): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636582.884:14436): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636582.887:14437): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=71316 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636582.940:14438): pid=71331 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636582.940:14439): pid=71331 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A6B686269736F70687274687472797974716A636F78676E6C7169657A74796C203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363538322E3733353030372D37303634382D37333138313535323431373939352F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636582.941:14440): pid=71331 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636582.946:14441): pid=71331 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636583.124:14442): pid=71331 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636583.124:14443): pid=71331 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636583.127:14444): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636583.128:14445): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636583.142:14446): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636583.142:14447): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636583.143:14448): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=71335 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636583.164:14449): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636583.164:14450): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636583.403:14451): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636583.404:14452): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636583.405:14453): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=71351 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636583.439:14454): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636583.439:14455): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636583.451:14456): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636583.451:14457): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636583.452:14458): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=71365 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636583.478:14459): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636583.478:14460): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636583.496:14461): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636583.496:14462): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636583.498:14463): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=71386 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636583.532:14464): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636583.532:14465): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636583.547:14466): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636583.547:14467): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636583.549:14468): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=71400 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636583.572:14469): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636583.572:14470): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636583.584:14471): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636583.584:14472): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636583.585:14473): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=71415 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636583.650:14474): pid=71430 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636583.651:14475): pid=71430 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D62706868796C616B61706E6E636B78696E6877716F636D69626479786B74696E203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363538332E3434303431362D37303634382D3235303238353035393338363430312F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636583.651:14476): pid=71430 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636583.653:14477): pid=71430 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636583.822:14478): pid=71430 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636583.823:14479): pid=71430 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636583.826:14480): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636583.827:14481): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636583.838:14482): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636583.838:14483): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636583.839:14484): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=71434 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636583.866:14485): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636583.866:14486): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636584.078:14487): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636584.078:14488): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636584.083:14489): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=71449 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636584.111:14490): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636584.111:14491): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636584.121:14492): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636584.121:14493): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636584.122:14494): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=71463 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636584.164:14495): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636584.164:14496): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636584.193:14497): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636584.193:14498): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636584.194:14499): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=71484 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636584.230:14500): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636584.230:14501): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636584.242:14502): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636584.242:14503): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636584.244:14504): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=71498 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636584.278:14505): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636584.278:14506): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636584.289:14507): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636584.295:14508): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636584.296:14509): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=71513 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636584.380:14510): pid=71528 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636584.380:14511): pid=71528 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F627A687866656D6F686E676A786C70657379636177706D70756B6275647572203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363538342E313039303438362D37303634382D3139353338393734303938383834352F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636584.381:14512): pid=71528 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636584.385:14513): pid=71528 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636584.561:14514): pid=71528 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636584.561:14515): pid=71528 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636584.567:14516): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636584.567:14517): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636584.579:14518): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636584.579:14519): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636584.580:14520): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=71532 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636584.617:14521): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636584.617:14522): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636584.844:14523): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636584.844:14524): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636584.846:14525): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=71547 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636584.870:14526): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636584.870:14527): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636584.882:14528): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636584.882:14529): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636584.884:14530): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=71561 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636584.911:14531): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636584.912:14532): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636584.930:14533): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636584.930:14534): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636584.931:14535): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=71582 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636584.964:14536): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636584.964:14537): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636584.976:14538): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636584.976:14539): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636584.977:14540): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=71596 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636585.000:14541): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636585.000:14542): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636585.012:14543): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636585.012:14544): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636585.013:14545): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=71611 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636585.072:14546): pid=71626 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636585.072:14547): pid=71626 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B7A79657174726E74626A746D646B796372716A6C6F6778666E6A626F6A6B66203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363538342E3837313834382D37303634382D3139373531383038373932373630392F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636585.073:14548): pid=71626 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636585.074:14549): pid=71626 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636585.263:14550): pid=71626 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636585.263:14551): pid=71626 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636585.265:14552): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636585.265:14553): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636585.276:14554): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636585.276:14555): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636585.277:14556): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=71630 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636585.298:14557): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636585.298:14558): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636585.536:14559): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636585.536:14560): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636585.538:14561): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=71646 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636585.555:14562): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636585.555:14563): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636585.565:14564): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636585.565:14565): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636585.567:14566): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=71660 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636585.591:14567): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636585.591:14568): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636585.606:14569): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636585.606:14570): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636585.607:14571): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=71681 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636585.642:14572): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636585.642:14573): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636585.654:14574): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636585.654:14575): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636585.655:14576): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=71695 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636585.674:14577): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636585.674:14578): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636585.687:14579): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636585.687:14580): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636585.688:14581): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=71710 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636585.747:14582): pid=71725 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636585.747:14583): pid=71725 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D64677762726F7A7A6D6B76717977647572766363796871767A77766D6C676866203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363538352E3535373038392D37303634382D34363334393032333134323235312F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636585.748:14584): pid=71725 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636585.750:14585): pid=71725 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636585.991:14586): pid=71725 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636585.992:14587): pid=71725 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636585.995:14588): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636585.996:14589): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636586.008:14590): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636586.008:14591): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636586.009:14592): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=71729 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636586.029:14593): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636586.029:14594): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636586.271:14595): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636586.271:14596): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636586.272:14597): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=71744 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636586.291:14598): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636586.291:14599): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636586.302:14600): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636586.303:14601): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636586.304:14602): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=71758 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636586.326:14603): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636586.326:14604): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636586.342:14605): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636586.342:14606): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636586.343:14607): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=71779 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636586.378:14608): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636586.378:14609): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636586.394:14610): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636586.394:14611): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636586.395:14612): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=71793 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636586.419:14613): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636586.420:14614): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636586.430:14615): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636586.430:14616): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636586.432:14617): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=71808 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636586.485:14618): pid=71823 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636586.485:14619): pid=71823 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B72616E7469636865757572726B7666746A6E6B70726C75737764766A747A68203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363538362E323933323734322D37303634382D31363131343834353334393832352F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636586.486:14620): pid=71823 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636586.487:14621): pid=71823 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636586.666:14622): pid=71823 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636586.667:14623): pid=71823 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636586.669:14624): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636586.671:14625): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636586.682:14626): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636586.682:14627): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636586.683:14628): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=71828 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636586.703:14629): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636586.703:14630): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636586.981:14631): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636586.981:14632): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636586.982:14633): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=71843 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636587.005:14634): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636587.005:14635): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636587.021:14636): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636587.021:14637): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636587.022:14638): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=71857 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636587.049:14639): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636587.050:14640): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636587.067:14641): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636587.067:14642): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636587.069:14643): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=71878 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636587.101:14644): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636587.101:14645): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636587.115:14646): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636587.115:14647): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636587.116:14648): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=71892 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636587.136:14649): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636587.136:14650): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636587.148:14651): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636587.148:14652): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636587.149:14653): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=71907 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636587.205:14654): pid=71922 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636587.205:14655): pid=71922 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6674787A70616B6869676C736F76747565686F726E7279656F7970766564706A203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363538372E303037343832382D37303634382D3139333931323631303335303232392F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636587.206:14656): pid=71922 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636587.207:14657): pid=71922 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636587.384:14658): pid=71922 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636587.384:14659): pid=71922 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636587.386:14660): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636587.387:14661): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636587.397:14662): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636587.398:14663): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636587.399:14664): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=71928 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636587.419:14665): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636587.419:14666): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636587.613:14667): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636587.614:14668): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636587.615:14669): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=71943 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636587.639:14670): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636587.639:14671): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636587.649:14672): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636587.649:14673): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636587.650:14674): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=71957 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636587.674:14675): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636587.674:14676): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636587.693:14677): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636587.693:14678): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636587.694:14679): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=71978 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636587.733:14680): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636587.733:14681): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636587.748:14682): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636587.748:14683): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636587.749:14684): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=71992 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636587.772:14685): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636587.772:14686): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636587.784:14687): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636587.785:14688): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636587.786:14689): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=72007 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636587.845:14690): pid=72022 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636587.845:14691): pid=72022 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D69767174696E64736C676D61756F6A6E6770736C75636F79636D6B6B69707064203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363538372E3634303331332D37303634382D36303736363938333539313330392F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636587.846:14692): pid=72022 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636587.847:14693): pid=72022 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636588.013:14694): pid=72022 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636588.013:14695): pid=72022 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636588.016:14696): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636588.017:14697): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636588.028:14698): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636588.028:14699): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636588.029:14700): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=72026 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636588.051:14701): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636588.051:14702): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636588.292:14703): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636588.292:14704): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636588.293:14705): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=72041 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636588.317:14706): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636588.317:14707): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636588.333:14708): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636588.333:14709): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636588.334:14710): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=72055 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636588.362:14711): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636588.362:14712): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636588.383:14713): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636588.383:14714): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636588.385:14715): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=72076 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636588.424:14716): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636588.424:14717): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636588.440:14718): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636588.440:14719): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636588.442:14720): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=72090 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636588.466:14721): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636588.467:14722): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636588.482:14723): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636588.482:14724): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636588.483:14725): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=72105 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636588.549:14726): pid=72120 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636588.550:14727): pid=72120 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F67616D7A7968646265726D7768746965666773617267796D6A6E6877766764203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363538382E333139333830332D37303634382D33303630333436343037303731302F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636588.550:14728): pid=72120 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636588.552:14729): pid=72120 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636588.762:14730): pid=72120 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636588.762:14731): pid=72120 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636588.765:14732): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636588.766:14733): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636588.777:14734): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636588.777:14735): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636588.779:14736): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=72124 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636588.799:14737): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636588.799:14738): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636588.996:14739): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636588.996:14740): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636588.997:14741): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=72139 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636589.018:14742): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636589.018:14743): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636589.029:14744): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636589.029:14745): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636589.031:14746): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=72153 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636589.068:14747): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636589.069:14748): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636589.095:14749): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636589.095:14750): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636589.097:14751): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=72174 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636589.155:14752): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636589.155:14753): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636589.172:14754): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636589.172:14755): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636589.173:14756): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=72188 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636589.216:14757): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636589.216:14758): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636589.231:14759): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636589.231:14760): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636589.233:14761): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=72204 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636589.301:14762): pid=72219 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636589.301:14763): pid=72219 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D74686A7562716877697A666F62696971746B6876707A76736A67736263756E75203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363538392E303139383533342D37303634382D34323739353733303739313230302F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636589.301:14764): pid=72219 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636589.305:14765): pid=72219 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636589.485:14766): pid=72219 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636589.485:14767): pid=72219 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636589.487:14768): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636589.489:14769): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636589.503:14770): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636589.503:14771): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636589.505:14772): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=72224 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636589.527:14773): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636589.527:14774): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636589.753:14775): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636589.754:14776): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636589.755:14777): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=72239 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636589.781:14778): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636589.781:14779): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636589.792:14780): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636589.792:14781): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636589.793:14782): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=72253 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636589.821:14783): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636589.821:14784): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636589.840:14785): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636589.840:14786): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636589.841:14787): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=72274 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636589.877:14788): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636589.878:14789): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636589.897:14790): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636589.897:14791): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636589.898:14792): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=72288 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636589.918:14793): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636589.919:14794): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636589.931:14795): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636589.931:14796): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636589.932:14797): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=72303 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636589.987:14798): pid=72318 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636589.988:14799): pid=72318 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6461797879697177717769786774726172796D6F63657A747166796267716766203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363538392E373832373630342D37303634382D33393135323931323037333235332F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636589.988:14800): pid=72318 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636589.990:14801): pid=72318 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636590.159:14802): pid=72318 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636590.159:14803): pid=72318 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636590.162:14804): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636590.162:14805): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636590.174:14806): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636590.174:14807): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636590.175:14808): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=72322 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636590.196:14809): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636590.196:14810): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636590.452:14811): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636590.452:14812): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636590.453:14813): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=72337 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636590.474:14814): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636590.474:14815): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636590.487:14816): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636590.487:14817): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636590.488:14818): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=72351 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636590.513:14819): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636590.513:14820): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636590.532:14821): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636590.532:14822): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636590.533:14823): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=72372 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636590.563:14824): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636590.563:14825): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636590.581:14826): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636590.581:14827): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636590.582:14828): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=72386 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636590.606:14829): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636590.606:14830): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636590.622:14831): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636590.622:14832): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636590.623:14833): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=72401 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636590.685:14834): pid=72416 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636590.685:14835): pid=72416 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D73707462797971726A677177616E636175706A626B776376676561707167786F203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363539302E343736333135352D37303634382D3232323139363937333931343633332F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636590.686:14836): pid=72416 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636590.687:14837): pid=72416 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636590.909:14838): pid=72416 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636590.909:14839): pid=72416 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636590.912:14840): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636590.912:14841): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636590.927:14842): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636590.927:14843): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636590.931:14844): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=72420 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636590.965:14845): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636590.965:14846): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636591.237:14847): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636591.237:14848): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636591.238:14849): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=72435 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636591.268:14850): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636591.268:14851): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636591.279:14852): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636591.279:14853): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636591.280:14854): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=72449 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636591.306:14855): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636591.306:14856): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636591.323:14857): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636591.323:14858): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636591.324:14859): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=72470 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636591.363:14860): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636591.363:14861): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636591.375:14862): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636591.375:14863): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636591.376:14864): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=72484 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636591.398:14865): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636591.398:14866): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636591.411:14867): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636591.411:14868): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636591.412:14869): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=72499 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636591.471:14870): pid=72514 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636591.471:14871): pid=72514 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D76677A7A77656B74646A696A626A6E716A71737971657862686577666961737A203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363539312E3236393831382D37303634382D3231383837343330333735323834312F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636591.471:14872): pid=72514 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636591.473:14873): pid=72514 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636591.654:14874): pid=72514 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636591.655:14875): pid=72514 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636591.665:14876): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636591.666:14877): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636591.681:14878): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636591.682:14879): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636591.683:14880): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=72518 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636591.708:14881): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636591.708:14882): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636591.933:14883): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636591.933:14884): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636591.934:14885): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=72533 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636591.956:14886): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636591.956:14887): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636591.966:14888): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636591.966:14889): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636591.967:14890): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=72547 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636591.990:14891): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636591.990:14892): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636592.006:14893): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636592.007:14894): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636592.008:14895): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=72568 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636592.041:14896): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636592.041:14897): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636592.053:14898): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636592.053:14899): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636592.054:14900): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=72582 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636592.075:14901): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636592.075:14902): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636592.086:14903): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636592.086:14904): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636592.087:14905): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=72597 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636592.149:14906): pid=72612 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636592.149:14907): pid=72612 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A6C706D727A6E6C687062716F7578797368796F7A6A6E6575716764766C6A7A203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363539312E393537373534312D37303634382D3135383337323437343232333330372F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636592.150:14908): pid=72612 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636592.152:14909): pid=72612 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636592.343:14910): pid=72612 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636592.343:14911): pid=72612 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636592.346:14912): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636592.349:14913): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636592.360:14914): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636592.360:14915): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636592.361:14916): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=72636 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636592.389:14917): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636592.389:14918): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636592.600:14919): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636592.600:14920): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636592.602:14921): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=72652 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636592.622:14922): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636592.622:14923): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636592.634:14924): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636592.635:14925): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636592.636:14926): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=72679 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636592.669:14927): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636592.669:14928): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636592.688:14929): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636592.688:14930): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636592.689:14931): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=72705 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636592.726:14932): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636592.726:14933): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636592.739:14934): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636592.739:14935): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636592.740:14936): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=72719 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636592.760:14937): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636592.761:14938): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636592.775:14939): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636592.775:14940): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636592.776:14941): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=72734 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636592.842:14942): pid=72749 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636592.843:14943): pid=72749 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D66756C737277626D646966786962716E786B6A657665696F75636E7178687874203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363539322E363235343433372D37303634382D3131353832343536373833333531382F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636592.843:14944): pid=72749 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636592.845:14945): pid=72749 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636593.027:14946): pid=72749 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636593.027:14947): pid=72749 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636593.030:14948): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636593.032:14949): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636593.044:14950): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636593.044:14951): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636593.045:14952): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=72771 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636593.070:14953): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636593.070:14954): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636593.280:14955): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636593.280:14956): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636593.282:14957): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=72810 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636593.309:14958): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636593.309:14959): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636593.320:14960): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636593.320:14961): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636593.322:14962): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=72824 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636593.352:14963): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636593.352:14964): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636593.368:14965): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636593.368:14966): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636593.369:14967): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=72845 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636593.403:14968): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636593.403:14969): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636593.415:14970): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636593.416:14971): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636593.417:14972): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=72860 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636593.439:14973): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636593.439:14974): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636593.451:14975): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636593.451:14976): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636593.452:14977): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=72877 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636593.515:14978): pid=72892 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636593.516:14979): pid=72892 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7072646D6774676B7378676D6D6A707A737A6D6B77666D706663677578787875203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363539332E3331303636392D37303634382D31313030393934363638393031302F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636593.516:14980): pid=72892 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636593.519:14981): pid=72892 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636593.686:14982): pid=72892 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636593.686:14983): pid=72892 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636593.689:14984): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636593.690:14985): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636593.701:14986): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636593.701:14987): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636593.702:14988): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=72898 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636593.726:14989): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636593.726:14990): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636593.977:14991): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636593.977:14992): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636593.978:14993): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=72945 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636593.998:14994): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636593.998:14995): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636594.009:14996): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636594.009:14997): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636594.011:14998): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=72962 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636594.039:14999): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636594.039:15000): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636594.058:15001): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636594.058:15002): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636594.059:15003): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=73013 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636594.097:15004): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636594.097:15005): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636594.113:15006): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636594.113:15007): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636594.114:15008): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=73048 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636594.145:15009): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636594.145:15010): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636594.157:15011): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636594.157:15012): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636594.158:15013): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=73064 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636594.222:15014): pid=73084 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636594.223:15015): pid=73084 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D616470746C636A767269736A6A72717575636964737275766565666374626A70203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363539332E393939333831382D37303634382D31353338343435323136313939332F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636594.223:15016): pid=73084 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636594.225:15017): pid=73084 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636594.401:15018): pid=73084 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636594.402:15019): pid=73084 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636594.404:15020): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636594.404:15021): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636594.417:15022): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636594.417:15023): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636594.418:15024): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=73088 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636594.438:15025): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636594.438:15026): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636594.750:15027): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636594.750:15028): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636594.752:15029): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=73103 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636594.780:15030): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636594.781:15031): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636594.792:15032): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636594.796:15033): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636594.799:15034): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=73117 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636594.841:15035): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636594.841:15036): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636594.857:15037): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636594.857:15038): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636594.858:15039): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=73138 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636594.890:15040): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636594.890:15041): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636594.903:15042): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636594.903:15043): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636594.905:15044): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=73152 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636594.943:15045): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636594.943:15046): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636594.955:15047): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636594.955:15048): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636594.956:15049): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=73167 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636595.008:15050): pid=73182 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636595.008:15051): pid=73182 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6175796D666E6E6D7A656375716B787A73636E72626D6A65636A6E6A6279786C203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363539342E373832353533342D37303634382D3136383137333232313434333435342F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636595.008:15052): pid=73182 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636595.010:15053): pid=73182 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636595.182:15054): pid=73182 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636595.183:15055): pid=73182 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636595.188:15056): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636595.188:15057): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636595.200:15058): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636595.200:15059): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636595.201:15060): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=73186 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636595.238:15061): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636595.238:15062): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636595.469:15063): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636595.469:15064): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636595.470:15065): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=73201 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636595.501:15066): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636595.501:15067): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636595.515:15068): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636595.515:15069): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636595.517:15070): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=73215 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636595.565:15071): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636595.565:15072): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636595.585:15073): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636595.585:15074): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636595.586:15075): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=73236 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636595.638:15076): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636595.638:15077): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636595.652:15078): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636595.652:15079): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636595.653:15080): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=73254 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636595.684:15081): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636595.684:15082): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636595.695:15083): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636595.696:15084): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636595.698:15085): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=73273 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636595.760:15086): pid=73288 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636595.760:15087): pid=73288 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A6B6A66626B6D656C69727A677667736F757A746E676F74756779676F7A746E203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363539352E353033313033372D37303634382D3132303032353733363130363132302F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636595.762:15088): pid=73288 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636595.765:15089): pid=73288 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636595.939:15090): pid=73288 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636595.939:15091): pid=73288 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636595.942:15092): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636595.943:15093): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636595.954:15094): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636595.954:15095): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636595.955:15096): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=73292 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636595.975:15097): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636595.975:15098): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636596.165:15099): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636596.165:15100): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636596.167:15101): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=73307 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636596.188:15102): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636596.188:15103): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636596.198:15104): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636596.198:15105): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636596.199:15106): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=73321 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636596.230:15107): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636596.230:15108): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636596.247:15109): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636596.248:15110): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636596.249:15111): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=73342 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636596.279:15112): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636596.279:15113): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636596.291:15114): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636596.291:15115): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636596.292:15116): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=73356 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636596.313:15117): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636596.313:15118): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636596.327:15119): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636596.327:15120): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636596.329:15121): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=73371 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636596.389:15122): pid=73386 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636596.389:15123): pid=73386 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7863686D636863616E6C746D666470787462627463766D7A616E786C64667279203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363539362E313930363839362D37303634382D3139323638333339373234313431322F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636596.390:15124): pid=73386 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636596.392:15125): pid=73386 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636596.575:15126): pid=73386 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636596.575:15127): pid=73386 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636596.577:15128): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636596.578:15129): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636596.589:15130): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636596.590:15131): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636596.591:15132): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=73390 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636596.611:15133): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636596.612:15134): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636596.862:15135): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636596.862:15136): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636596.863:15137): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=73405 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636596.886:15138): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636596.886:15139): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636596.898:15140): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636596.898:15141): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636596.900:15142): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=73419 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636596.926:15143): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636596.926:15144): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636596.945:15145): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636596.945:15146): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636596.946:15147): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=73440 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636596.979:15148): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636596.979:15149): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636596.992:15150): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636596.992:15151): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636596.993:15152): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=73454 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636597.014:15153): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636597.014:15154): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636597.025:15155): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636597.025:15156): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636597.026:15157): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=73469 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636597.081:15158): pid=73484 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636597.081:15159): pid=73484 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C6D6B7971776D7363766A6E76786B6A78696864796C75757065746B777A6B6D203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363539362E383838393036372D37303634382D38353035343539313235343239382F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636597.082:15160): pid=73484 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636597.084:15161): pid=73484 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636597.245:15162): pid=73484 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636597.246:15163): pid=73484 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636597.250:15164): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636597.250:15165): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636597.262:15166): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636597.262:15167): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636597.263:15168): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=73490 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636597.282:15169): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636597.282:15170): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636597.490:15171): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636597.490:15172): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636597.491:15173): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=73505 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636597.512:15174): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636597.512:15175): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636597.525:15176): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636597.525:15177): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636597.527:15178): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=73519 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636597.555:15179): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636597.555:15180): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636597.572:15181): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636597.573:15182): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636597.574:15183): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=73540 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636597.610:15184): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636597.611:15185): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636597.625:15186): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636597.625:15187): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636597.626:15188): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=73554 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636597.647:15189): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636597.647:15190): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636597.663:15191): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636597.663:15192): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636597.665:15193): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=73569 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636597.735:15194): pid=73584 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636597.735:15195): pid=73584 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D746A7A6D797761687263636466697A6B7068687967766D6768797A6C7973756A203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363539372E353135313736352D37303634382D37313933313533343837383934342F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636597.736:15196): pid=73584 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636597.737:15197): pid=73584 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636597.905:15198): pid=73584 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636597.905:15199): pid=73584 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636597.910:15200): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636597.910:15201): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636597.920:15202): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636597.920:15203): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636597.921:15204): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=73588 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636597.943:15205): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636597.943:15206): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636598.150:15207): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636598.150:15208): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636598.151:15209): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=73603 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636598.170:15210): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636598.170:15211): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636598.184:15212): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636598.184:15213): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636598.185:15214): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=73617 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636598.209:15215): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636598.209:15216): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636598.227:15217): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636598.227:15218): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636598.228:15219): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=73638 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636598.272:15220): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636598.272:15221): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636598.286:15222): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636598.286:15223): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636598.287:15224): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=73652 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636598.308:15225): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636598.309:15226): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636598.321:15227): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636598.322:15228): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636598.323:15229): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=73667 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636598.376:15230): pid=73682 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636598.377:15231): pid=73682 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6473737363716B63706B7477766A6C727675646B6B6C6D767A707579736D7862203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363539382E313733323430372D37303634382D3235343338333232363132333939332F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636598.377:15232): pid=73682 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636598.379:15233): pid=73682 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636598.542:15234): pid=73682 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636598.542:15235): pid=73682 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636598.545:15236): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636598.545:15237): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636598.556:15238): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636598.557:15239): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636598.558:15240): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=73686 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636598.583:15241): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636598.583:15242): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636598.835:15243): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636598.835:15244): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636598.836:15245): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=73701 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636598.863:15246): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636598.863:15247): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636598.875:15248): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636598.875:15249): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636598.876:15250): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=73715 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636598.909:15251): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636598.909:15252): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636598.927:15253): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636598.927:15254): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636598.929:15255): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=73736 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636598.963:15256): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636598.963:15257): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636598.977:15258): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636598.977:15259): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636598.979:15260): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=73750 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636599.001:15261): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636599.001:15262): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636599.016:15263): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636599.016:15264): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636599.017:15265): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=73765 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636599.075:15266): pid=73780 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636599.075:15267): pid=73780 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A77736678657075776966706271636478656C716D72706A70686F646B697771203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363539382E3836363037312D37303634382D3232313330353839383438383937392F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636599.076:15268): pid=73780 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636599.078:15269): pid=73780 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636599.260:15270): pid=73780 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636599.260:15271): pid=73780 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636599.264:15272): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636599.264:15273): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636599.275:15274): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636599.276:15275): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636599.277:15276): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=73784 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636599.297:15277): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636599.297:15278): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636599.645:15279): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636599.645:15280): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636599.646:15281): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=73804 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636599.665:15282): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636599.665:15283): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636599.678:15284): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636599.678:15285): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636599.679:15286): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=73818 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636599.701:15287): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636599.701:15288): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636599.717:15289): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636599.717:15290): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636599.719:15291): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=73839 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636599.755:15292): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636599.755:15293): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636599.771:15294): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636599.771:15295): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636599.772:15296): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=73853 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636599.796:15297): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636599.796:15298): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636599.808:15299): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636599.808:15300): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636599.810:15301): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=73868 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636599.867:15302): pid=73883 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636599.867:15303): pid=73883 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7171746F747378726F686E696C64726A786B726B6C6576666B6E6F677473676A203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363539392E363638353639362D37333830322D3139353939353635303534363638312F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636599.867:15304): pid=73883 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636599.869:15305): pid=73883 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636600.047:15306): pid=73883 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636600.047:15307): pid=73883 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636600.051:15308): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636600.051:15309): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636600.062:15310): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636600.062:15311): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636600.063:15312): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=73887 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636600.084:15313): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636600.084:15314): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636600.334:15315): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636600.334:15316): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636600.335:15317): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=73904 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636600.357:15318): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636600.357:15319): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636600.369:15320): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636600.369:15321): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636600.370:15322): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=73918 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636600.395:15323): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636600.395:15324): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636600.416:15325): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636600.416:15326): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636600.417:15327): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=73939 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636600.451:15328): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636600.452:15329): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636600.468:15330): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636600.468:15331): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636600.470:15332): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=73953 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636600.495:15333): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636600.495:15334): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636600.514:15335): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636600.514:15336): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636600.515:15337): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=73968 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636600.575:15338): pid=73983 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636600.575:15339): pid=73983 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D736971786E6C686C70766862696D767A787471776E786D656E72796E6663616F203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363630302E333630343031392D37333930322D35363132343433343837333838372F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636600.576:15340): pid=73983 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636600.578:15341): pid=73983 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636600.763:15342): pid=73983 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636600.764:15343): pid=73983 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636600.768:15344): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636600.769:15345): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636600.780:15346): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636600.780:15347): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636600.781:15348): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=73987 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636600.808:15349): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636600.809:15350): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636601.147:15351): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636601.148:15352): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636601.149:15353): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=74004 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636601.169:15354): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636601.170:15355): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636601.182:15356): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636601.182:15357): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636601.183:15358): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=74018 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636601.209:15359): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636601.210:15360): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636601.227:15361): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636601.227:15362): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636601.228:15363): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=74039 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636601.263:15364): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636601.263:15365): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636601.277:15366): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636601.278:15367): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636601.279:15368): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=74053 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636601.305:15369): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636601.305:15370): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636601.315:15371): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636601.315:15372): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636601.316:15373): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=74068 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636601.387:15374): pid=74083 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636601.387:15375): pid=74083 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D67616C6E65677A666E767968636C746371787966696970796F6D667A6D6A6566203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363630312E313732353739382D37343030322D36323337373034313131383536382F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636601.388:15376): pid=74083 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636601.390:15377): pid=74083 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636601.585:15378): pid=74083 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636601.585:15379): pid=74083 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636601.588:15380): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636601.589:15381): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636601.603:15382): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636601.603:15383): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636601.605:15384): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=74087 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636601.629:15385): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636601.629:15386): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636601.887:15387): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636601.887:15388): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636601.888:15389): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=74107 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636601.913:15390): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636601.914:15391): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636601.929:15392): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636601.930:15393): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636601.931:15394): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=74121 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636601.957:15395): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636601.957:15396): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636601.978:15397): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636601.978:15398): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636601.980:15399): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=74142 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636602.013:15400): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636602.013:15401): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636602.027:15402): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636602.027:15403): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636602.029:15404): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=74156 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636602.050:15405): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636602.050:15406): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636602.063:15407): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636602.063:15408): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636602.065:15409): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=74171 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636602.127:15410): pid=74186 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636602.127:15411): pid=74186 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D676E716575777973727373616174716E66776364786B6374676178757A6B6379203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363630312E393137303434362D37343130332D3139363135363832363637383932332F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636602.128:15412): pid=74186 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636602.130:15413): pid=74186 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636602.305:15414): pid=74186 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636602.306:15415): pid=74186 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636602.308:15416): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636602.308:15417): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636602.320:15418): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636602.320:15419): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636602.321:15420): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=74190 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636602.343:15421): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636602.343:15422): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636602.574:15423): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636602.574:15424): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636602.575:15425): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=74207 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636602.595:15426): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636602.596:15427): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636602.607:15428): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636602.607:15429): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636602.608:15430): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=74221 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636602.634:15431): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636602.634:15432): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636602.680:15433): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636602.680:15434): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636602.681:15435): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=74242 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636602.712:15436): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636602.713:15437): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636602.726:15438): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636602.726:15439): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636602.727:15440): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=74256 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636602.749:15441): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636602.749:15442): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636602.763:15443): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636602.763:15444): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636602.764:15445): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=74271 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636602.820:15446): pid=74286 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636602.821:15447): pid=74286 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F7776676B7A6771617264706B73667972687265657064786476746C776D6F75203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363630322E353938353537322D37343230352D3232323233383736323531313135342F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636602.821:15448): pid=74286 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636602.824:15449): pid=74286 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636603.035:15450): pid=74286 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636603.035:15451): pid=74286 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636603.038:15452): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636603.040:15453): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636603.062:15454): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636603.062:15455): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636603.064:15456): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=74291 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636603.092:15457): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636603.092:15458): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636603.109:15459): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636603.109:15460): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636603.110:15461): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=74305 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636603.134:15462): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636603.136:15463): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636603.156:15464): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636603.156:15465): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636603.157:15466): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=74321 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636603.192:15467): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636603.193:15468): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636603.205:15469): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636603.205:15470): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636603.206:15471): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=74335 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636603.235:15472): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636603.235:15473): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636603.247:15474): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636603.247:15475): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636603.248:15476): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=74351 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636603.305:15477): pid=74366 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636603.306:15478): pid=74366 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C716963796375696665646463726E73706D656D72726A6C77756E647A797576203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363630322E353938353537322D37343230352D3232323233383736323531313135342F416E736962616C6C5A5F636F70792E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636603.306:15479): pid=74366 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636603.307:15480): pid=74366 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636603.517:15481): pid=74366 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636603.517:15482): pid=74366 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636603.520:15483): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636603.522:15484): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636603.535:15485): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636603.535:15486): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636603.536:15487): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=74370 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636603.566:15488): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636603.566:15489): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636603.823:15490): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636603.823:15491): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636603.824:15492): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=74387 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636603.849:15493): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636603.849:15494): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636603.861:15495): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636603.861:15496): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636603.864:15497): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=74401 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636603.898:15498): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636603.899:15499): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636603.917:15500): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636603.918:15501): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636603.919:15502): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=74422 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636603.958:15503): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636603.958:15504): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636603.973:15505): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636603.973:15506): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636603.975:15507): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=74436 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636604.000:15508): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636604.000:15509): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636604.016:15510): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636604.016:15511): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636604.017:15512): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=74451 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636604.081:15513): pid=74466 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636604.081:15514): pid=74466 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D656C7961696261626C69796C716D6F7A6D6E676162746B796362786F76746B71203B2068747470735F70726F78793D272720687474705F70726F78793D272720444F434B45525F434C49454E545F54494D454F55543D31323020434F4D504F53455F485454505F54494D454F55543D313230202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363630332E3835323038372D37343338352D3233383634303634363431373038322F416E736962616C6C5A5F646F636B65725F636F6D706F73652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636604.081:15515): pid=74466 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636604.083:15516): pid=74466 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=BPF msg=audit(1744636604.857:15517): prog-id=481 op=LOAD type=BPF msg=audit(1744636604.858:15518): prog-id=482 op=LOAD type=SYSCALL msg=audit(1744636604.858:15518): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001c7ad0 a2=90 a3=0 items=0 ppid=74500 pid=74512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636604.858:15518): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36396132323139386130633231623335633464653839333733 type=BPF msg=audit(1744636604.859:15519): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636604.859:15520): prog-id=483 op=LOAD type=SYSCALL msg=audit(1744636604.859:15520): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001c7c48 a2=90 a3=0 items=0 ppid=74500 pid=74512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636604.859:15520): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36396132323139386130633231623335633464653839333733 type=BPF msg=audit(1744636604.859:15521): prog-id=484 op=LOAD type=SYSCALL msg=audit(1744636604.859:15521): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001c79d8 a2=90 a3=0 items=0 ppid=74500 pid=74512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636604.859:15521): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36396132323139386130633231623335633464653839333733 type=BPF msg=audit(1744636604.859:15522): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636604.859:15523): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636604.859:15524): prog-id=485 op=LOAD type=SYSCALL msg=audit(1744636604.859:15524): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001c7eb0 a2=90 a3=0 items=0 ppid=74500 pid=74512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636604.859:15524): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36396132323139386130633231623335633464653839333733 type=USER_END msg=audit(1744636604.971:15525): pid=74466 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636604.971:15526): pid=74466 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636604.974:15527): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636604.974:15528): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636604.987:15529): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636604.987:15530): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636604.988:15531): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=74581 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636605.013:15532): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636605.013:15533): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636605.478:15534): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636605.478:15535): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636605.479:15536): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=74612 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636605.500:15537): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636605.500:15538): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636605.511:15539): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636605.511:15540): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636605.512:15541): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=74626 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636605.538:15542): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636605.538:15543): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636605.556:15544): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636605.556:15545): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636605.558:15546): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=74647 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=BPF msg=audit(1744636605.580:15547): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636605.580:15548): prog-id=0 op=UNLOAD type=USER_END msg=audit(1744636605.596:15549): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636605.596:15550): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636605.608:15551): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636605.609:15552): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636605.610:15553): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=74679 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636605.639:15554): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636605.640:15555): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636605.650:15556): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636605.651:15557): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636605.652:15558): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=74698 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636605.708:15559): pid=74713 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636605.708:15560): pid=74713 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B61677A6F616777666665726D6765626C6575786D76707165666C656C7A706C203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363630352E353031383730342D37343631302D3132303039363930323031343139362F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636605.709:15561): pid=74713 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636605.711:15562): pid=74713 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636605.921:15563): pid=74713 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636605.921:15564): pid=74713 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636605.924:15565): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636605.924:15566): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636605.936:15567): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636605.936:15568): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636605.937:15569): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=74717 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636605.956:15570): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636605.957:15571): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636606.523:15572): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636606.524:15573): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636606.525:15574): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=74736 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636606.544:15575): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636606.544:15576): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636606.555:15577): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636606.555:15578): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636606.556:15579): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=74750 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636606.583:15580): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636606.583:15581): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636606.609:15582): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636606.609:15583): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636606.611:15584): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=74771 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636606.643:15585): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636606.643:15586): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636606.658:15587): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636606.658:15588): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636606.659:15589): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=74785 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636606.680:15590): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636606.680:15591): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636606.694:15592): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636606.694:15593): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636606.696:15594): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=74800 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636606.753:15595): pid=74815 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636606.753:15596): pid=74815 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D616271786F706E62676E736A78726F78797870646A646C75656B617170726662203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363630362E353437313336382D37343733342D3234373734353930383338333135392F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636606.753:15597): pid=74815 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636606.755:15598): pid=74815 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636606.928:15599): pid=74815 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636606.929:15600): pid=74815 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636606.931:15601): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636606.931:15602): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636606.946:15603): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636606.946:15604): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636606.947:15605): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=74820 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636606.970:15606): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636606.970:15607): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636606.983:15608): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636606.983:15609): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636606.984:15610): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=74834 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636607.023:15611): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636607.023:15612): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636607.049:15613): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636607.049:15614): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636607.051:15615): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=74850 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636607.099:15616): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636607.099:15617): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636607.108:15618): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636607.108:15619): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636607.109:15620): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=74864 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636607.129:15621): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636607.129:15622): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636607.141:15623): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636607.141:15624): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636607.142:15625): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=74879 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636607.196:15626): pid=74894 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636607.197:15627): pid=74894 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C7874766D6474776863626A71766F7067646C676E686D68757462796F626A78203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363630362E353437313336382D37343733342D3234373734353930383338333135392F416E736962616C6C5A5F636F70792E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636607.197:15628): pid=74894 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636607.199:15629): pid=74894 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636607.399:15630): pid=74894 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636607.401:15631): pid=74894 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636607.403:15632): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636607.405:15633): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636607.427:15634): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636607.427:15635): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636607.428:15636): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=74902 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636607.447:15637): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636607.447:15638): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636607.678:15639): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636607.678:15640): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636607.679:15641): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=74923 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636607.699:15642): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636607.699:15643): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636607.711:15644): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636607.711:15645): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636607.712:15646): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=74937 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636607.739:15647): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636607.739:15648): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636607.756:15649): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636607.756:15650): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636607.757:15651): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=74958 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636607.796:15652): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636607.796:15653): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636607.812:15654): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636607.812:15655): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636607.814:15656): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=74973 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636607.838:15657): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636607.838:15658): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636607.851:15659): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636607.851:15660): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636607.853:15661): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=74988 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636607.907:15662): pid=75003 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636607.908:15663): pid=75003 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F6563747664646977736D6D667A76616B69757278646F79736E6F70686F7964203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363630372E373032373335372D37343931372D3230343333363133373334343430342F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636607.908:15664): pid=75003 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636607.910:15665): pid=75003 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636608.309:15666): pid=75003 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636608.310:15667): pid=75003 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636608.313:15668): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636608.314:15669): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636608.327:15670): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636608.327:15671): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636608.328:15672): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=75013 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636608.365:15673): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636608.365:15674): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636608.616:15675): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636608.616:15676): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636608.617:15677): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=75030 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636608.636:15678): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636608.636:15679): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636608.649:15680): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636608.649:15681): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636608.651:15682): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=75044 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636608.677:15683): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636608.677:15684): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636608.694:15685): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636608.694:15686): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636608.695:15687): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=75065 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636608.734:15688): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636608.734:15689): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636608.747:15690): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636608.747:15691): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636608.749:15692): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=75079 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636608.770:15693): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636608.770:15694): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636608.782:15695): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636608.783:15696): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636608.784:15697): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=75094 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636608.846:15698): pid=75109 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636608.847:15699): pid=75109 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D6D6E65617374746F656275746878697362737A6D6A62766D667A7370666178203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363630382E363339323133362D37353032382D3137393739363338393836323934342F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636608.847:15700): pid=75109 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636608.849:15701): pid=75109 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636609.128:15702): pid=75109 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636609.129:15703): pid=75109 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636609.131:15704): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636609.132:15705): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636609.144:15706): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636609.144:15707): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636609.147:15708): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=75123 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636609.166:15709): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636609.166:15710): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636609.448:15711): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636609.448:15712): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636609.449:15713): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=75165 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636609.469:15714): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636609.469:15715): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636609.481:15716): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636609.481:15717): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636609.482:15718): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=75179 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636609.508:15719): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636609.509:15720): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636609.526:15721): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636609.526:15722): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636609.528:15723): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=75200 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636609.563:15724): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636609.563:15725): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636609.576:15726): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636609.577:15727): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636609.578:15728): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=75214 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636609.602:15729): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636609.602:15730): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636609.614:15731): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636609.614:15732): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636609.615:15733): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=75229 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636609.670:15734): pid=75244 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636609.670:15735): pid=75244 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A7263776A75696E636B6D78696D706F766D7666626E756A66736261766C6B69203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363630392E343731333739352D37353133382D3139373930303730313435353039342F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636609.671:15736): pid=75244 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636609.673:15737): pid=75244 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636609.938:15738): pid=75244 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636609.939:15739): pid=75244 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636609.943:15740): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636609.945:15741): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636609.957:15742): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636609.957:15743): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636609.959:15744): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=75302 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636609.986:15745): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636609.986:15746): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636610.861:15747): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636610.861:15748): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636610.862:15749): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=75353 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636610.892:15750): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636610.892:15751): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636610.911:15752): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636610.911:15753): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636610.912:15754): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=75369 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636610.939:15755): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636610.939:15756): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636610.956:15757): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636610.957:15758): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636610.958:15759): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=75390 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636610.990:15760): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636610.990:15761): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636611.003:15762): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636611.004:15763): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636611.005:15764): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=75404 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636611.043:15765): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636611.043:15766): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636611.058:15767): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636611.058:15768): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636611.060:15769): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=75443 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636611.140:15770): pid=75463 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636611.141:15771): pid=75463 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E756F7776697A756B6B6864737379726768666C7576746C7767796B716F6566203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363631302E383934303031322D37353334392D3138313233373235333735363835392F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636611.141:15772): pid=75463 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636611.146:15773): pid=75463 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636611.865:15774): pid=75463 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636611.865:15775): pid=75463 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636611.868:15776): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636611.868:15777): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636611.880:15778): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636611.880:15779): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636611.881:15780): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=75585 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636611.911:15781): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636611.911:15782): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636612.551:15783): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636612.551:15784): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636612.553:15785): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=75604 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636612.590:15786): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636612.590:15787): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636612.603:15788): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636612.603:15789): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636612.607:15790): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=75618 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636612.641:15791): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636612.641:15792): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636612.661:15793): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636612.661:15794): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636612.662:15795): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=75639 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636612.698:15796): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636612.698:15797): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636612.713:15798): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636612.713:15799): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636612.715:15800): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=75653 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636612.737:15801): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636612.737:15802): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636612.749:15803): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636612.749:15804): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636612.751:15805): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=75668 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636612.815:15806): pid=75683 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636612.816:15807): pid=75683 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D67777861646D67656A657477747067736E6B76757A6D69646977676976736F66203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363631322E3539333238352D37353630322D3132313236313838323731323135352F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636612.816:15808): pid=75683 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636612.818:15809): pid=75683 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636613.009:15810): pid=75683 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636613.009:15811): pid=75683 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636613.016:15812): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636613.016:15813): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636613.029:15814): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636613.029:15815): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636613.030:15816): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=75692 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636613.059:15817): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636613.059:15818): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636613.341:15819): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636613.341:15820): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636613.343:15821): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=75740 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636613.364:15822): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636613.364:15823): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636613.376:15824): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636613.376:15825): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636613.377:15826): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=75772 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636613.418:15827): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636613.418:15828): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636613.442:15829): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636613.442:15830): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636613.443:15831): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=75826 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636613.477:15832): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636613.478:15833): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636613.489:15834): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636613.489:15835): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636613.490:15836): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=75841 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636613.525:15837): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636613.525:15838): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636613.538:15839): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636613.538:15840): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636613.542:15841): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=75861 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636613.609:15842): pid=75876 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636613.609:15843): pid=75876 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D656367787163786D6F77667A6F6E726975706378686277717A6F787A6D727878203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363631332E33363730312D37353730382D3135323237313036363837343531302F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636613.609:15844): pid=75876 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636613.611:15845): pid=75876 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636613.775:15846): pid=75876 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636613.776:15847): pid=75876 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636613.778:15848): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636613.779:15849): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636613.794:15850): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636613.794:15851): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636613.796:15852): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=75880 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636613.826:15853): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636613.826:15854): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636614.158:15855): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636614.158:15856): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636614.159:15857): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=75899 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636614.192:15858): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636614.192:15859): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636614.206:15860): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636614.206:15861): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636614.207:15862): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=75913 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636614.236:15863): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636614.236:15864): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636614.269:15865): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636614.269:15866): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636614.272:15867): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=75934 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636614.330:15868): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636614.330:15869): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636614.341:15870): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636614.345:15871): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636614.346:15872): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=75948 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636614.375:15873): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636614.376:15874): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636614.388:15875): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636614.391:15876): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636614.392:15877): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=75963 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636614.444:15878): pid=75978 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636614.444:15879): pid=75978 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E68686469636A70627776727974726D636C746C7179716D6A6A626B6967756A203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363631342E313935323934362D37353839372D3136363039303930363237393731312F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636614.445:15880): pid=75978 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636614.446:15881): pid=75978 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636614.628:15882): pid=75978 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636614.628:15883): pid=75978 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636614.631:15884): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636614.631:15885): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636614.643:15886): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636614.643:15887): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636614.644:15888): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=75982 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636614.664:15889): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636614.664:15890): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636614.998:15891): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636614.999:15892): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636615.000:15893): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=76004 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636615.034:15894): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636615.034:15895): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636615.045:15896): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636615.045:15897): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636615.047:15898): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=76018 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636615.083:15899): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636615.083:15900): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636615.101:15901): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636615.101:15902): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636615.103:15903): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=76039 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636615.154:15904): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636615.154:15905): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636615.166:15906): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636615.166:15907): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636615.168:15908): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=76053 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636615.194:15909): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636615.195:15910): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636615.206:15911): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636615.206:15912): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636615.208:15913): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=76068 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636615.261:15914): pid=76083 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636615.262:15915): pid=76083 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7365686967636E79636D6678776F726C676C68776D766F637572626E676A7A73203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363631352E303336343335362D37353939372D31303737363639323032353432372F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636615.262:15916): pid=76083 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636615.267:15917): pid=76083 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636615.473:15918): pid=76083 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636615.473:15919): pid=76083 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636615.475:15920): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636615.476:15921): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636615.490:15922): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636615.490:15923): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636615.491:15924): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=76089 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636615.511:15925): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636615.511:15926): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636615.706:15927): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636615.706:15928): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636615.707:15929): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=76105 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636615.727:15930): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636615.727:15931): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636615.738:15932): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636615.738:15933): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636615.740:15934): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=76119 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636615.764:15935): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636615.765:15936): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636615.780:15937): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636615.781:15938): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636615.782:15939): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=76140 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636615.818:15940): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636615.819:15941): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636615.831:15942): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636615.831:15943): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636615.832:15944): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=76154 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636615.851:15945): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636615.851:15946): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636615.864:15947): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636615.864:15948): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636615.865:15949): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=76169 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636615.940:15950): pid=76184 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636615.940:15951): pid=76184 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D75636F726E6F7063716670747678656E6F69686B717973646A7267716962776A203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363631352E373239323134342D37353939372D3230343631303739383831353336322F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636615.941:15952): pid=76184 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636615.943:15953): pid=76184 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636616.109:15954): pid=76184 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636616.109:15955): pid=76184 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636616.112:15956): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636616.113:15957): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636616.124:15958): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636616.124:15959): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636616.125:15960): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=76188 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636616.148:15961): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636616.149:15962): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636616.343:15963): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636616.344:15964): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636616.345:15965): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=76203 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636616.364:15966): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636616.364:15967): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636616.375:15968): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636616.375:15969): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636616.376:15970): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=76217 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636616.400:15971): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636616.400:15972): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636616.419:15973): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636616.419:15974): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636616.420:15975): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=76238 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636616.451:15976): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636616.452:15977): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636616.463:15978): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636616.464:15979): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636616.465:15980): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=76252 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636616.489:15981): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636616.489:15982): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636616.502:15983): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636616.502:15984): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636616.503:15985): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=76267 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636616.568:15986): pid=76282 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636616.569:15987): pid=76282 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E707576756975627261737578767761696C777A786B6973627977776A677775203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363631362E3336373138352D37353939372D35363839393239383838393530382F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636616.569:15988): pid=76282 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636616.571:15989): pid=76282 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636616.740:15990): pid=76282 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636616.740:15991): pid=76282 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636616.743:15992): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636616.743:15993): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636616.756:15994): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636616.756:15995): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636616.758:15996): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=76286 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636616.785:15997): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636616.785:15998): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636616.985:15999): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636616.985:16000): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636616.986:16001): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=76301 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636617.006:16002): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636617.006:16003): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636617.018:16004): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636617.019:16005): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636617.020:16006): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=76315 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636617.043:16007): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636617.043:16008): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636617.059:16009): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636617.060:16010): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636617.061:16011): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=76336 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636617.093:16012): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636617.093:16013): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636617.106:16014): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636617.106:16015): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636617.107:16016): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=76350 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636617.128:16017): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636617.129:16018): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636617.142:16019): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636617.143:16020): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636617.144:16021): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=76365 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636617.202:16022): pid=76380 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636617.202:16023): pid=76380 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A7671627064696B727461726D6A72756C786F617178707A787167737168667A203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363631372E303039333338342D37353939372D31393938343532353934323432392F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636617.202:16024): pid=76380 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636617.204:16025): pid=76380 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636617.382:16026): pid=76380 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636617.382:16027): pid=76380 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636617.385:16028): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636617.385:16029): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636617.397:16030): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636617.397:16031): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636617.398:16032): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=76386 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636617.420:16033): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636617.420:16034): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636617.680:16035): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636617.680:16036): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636617.681:16037): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=76401 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636617.700:16038): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636617.700:16039): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636617.711:16040): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636617.711:16041): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636617.712:16042): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=76415 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636617.735:16043): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636617.736:16044): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636617.751:16045): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636617.751:16046): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636617.752:16047): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=76436 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636617.783:16048): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636617.783:16049): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636617.795:16050): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636617.795:16051): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636617.796:16052): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=76450 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636617.821:16053): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636617.821:16054): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636617.831:16055): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636617.831:16056): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636617.833:16057): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=76476 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636617.886:16058): pid=76511 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636617.886:16059): pid=76511 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D66776D70736262786B71716C6265656A717267677A78796765726A7278626461203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363631372E373033303435382D37353939372D3133373036323033343638343536392F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636617.887:16060): pid=76511 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636617.888:16061): pid=76511 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636618.087:16062): pid=76511 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636618.087:16063): pid=76511 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636618.089:16064): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636618.089:16065): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636618.103:16066): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636618.103:16067): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636618.104:16068): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=76515 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636618.125:16069): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636618.125:16070): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636618.338:16071): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636618.338:16072): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636618.339:16073): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=76530 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636618.357:16074): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636618.358:16075): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636618.369:16076): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636618.370:16077): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636618.371:16078): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=76544 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636618.412:16079): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636618.412:16080): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636618.440:16081): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636618.440:16082): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636618.441:16083): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=76565 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636618.477:16084): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636618.478:16085): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636618.489:16086): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636618.489:16087): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636618.490:16088): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=76579 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636618.511:16089): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636618.511:16090): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636618.524:16091): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636618.524:16092): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636618.525:16093): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=76594 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636618.580:16094): pid=76609 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636618.580:16095): pid=76609 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D617477686163756C6667686673747A6F72756676637479647062776566706A64203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363631382E333630343837352D37353939372D3235363938333737373132353636392F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636618.581:16096): pid=76609 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636618.582:16097): pid=76609 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636618.769:16098): pid=76609 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636618.769:16099): pid=76609 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636618.772:16100): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636618.772:16101): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636618.786:16102): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636618.787:16103): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636618.788:16104): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=76613 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636618.808:16105): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636618.808:16106): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636619.029:16107): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636619.029:16108): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636619.030:16109): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=76628 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636619.047:16110): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636619.047:16111): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636619.058:16112): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636619.058:16113): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636619.059:16114): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=76642 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636619.083:16115): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636619.083:16116): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636619.100:16117): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636619.100:16118): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636619.102:16119): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=76663 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636619.134:16120): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636619.134:16121): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636619.147:16122): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636619.147:16123): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636619.148:16124): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=76678 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636619.169:16125): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636619.170:16126): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636619.180:16127): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636619.180:16128): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636619.182:16129): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=76693 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636619.235:16130): pid=76708 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636619.235:16131): pid=76708 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B79716A6C6B6179736C6F6370786B6E70726F786568636173796370696F6E67203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363631392E303530343930342D37353939372D3236373938353030323938363835322F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636619.236:16132): pid=76708 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636619.238:16133): pid=76708 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636619.413:16134): pid=76708 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636619.414:16135): pid=76708 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636619.416:16136): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636619.416:16137): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636619.430:16138): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636619.430:16139): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636619.431:16140): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=76712 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636619.454:16141): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636619.454:16142): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636619.668:16143): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636619.668:16144): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636619.669:16145): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=76727 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636619.691:16146): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636619.691:16147): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636619.702:16148): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636619.702:16149): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636619.703:16150): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=76741 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636619.731:16151): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636619.731:16152): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636619.752:16153): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636619.752:16154): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636619.753:16155): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=76762 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636619.785:16156): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636619.786:16157): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636619.801:16158): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636619.801:16159): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636619.806:16160): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=76776 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636619.825:16161): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636619.825:16162): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636619.839:16163): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636619.839:16164): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636619.841:16165): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=76791 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636619.913:16166): pid=76806 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636619.913:16167): pid=76806 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D71776678746B74767470716D6D6478737861666E776D6A636167707774656C61203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363631392E363933323733352D37353939372D38373632313734393532353533302F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636619.914:16168): pid=76806 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636619.916:16169): pid=76806 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636620.136:16170): pid=76806 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636620.136:16171): pid=76806 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636620.139:16172): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636620.139:16173): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636620.153:16174): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636620.153:16175): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636620.155:16176): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=76811 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636620.180:16177): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636620.180:16178): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636620.445:16179): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636620.445:16180): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636620.447:16181): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=76826 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636620.468:16182): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636620.469:16183): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636620.482:16184): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636620.482:16185): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636620.483:16186): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=76840 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636620.519:16187): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636620.519:16188): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636620.537:16189): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636620.537:16190): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636620.538:16191): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=76861 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636620.572:16192): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636620.572:16193): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636620.586:16194): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636620.586:16195): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636620.587:16196): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=76875 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636620.610:16197): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636620.610:16198): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636620.629:16199): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636620.629:16200): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636620.631:16201): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=76890 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636620.696:16202): pid=76905 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636620.696:16203): pid=76905 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D61657765746F777368686965766666736D696A727773786B77746A77776F6471203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363632302E343730353435382D37353939372D3130313932343534303035353737342F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636620.697:16204): pid=76905 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636620.699:16205): pid=76905 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636620.876:16206): pid=76905 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636620.876:16207): pid=76905 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636620.879:16208): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636620.879:16209): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636620.893:16210): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636620.893:16211): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636620.894:16212): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=76909 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636620.916:16213): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636620.916:16214): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636621.121:16215): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636621.121:16216): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636621.123:16217): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=76924 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636621.143:16218): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636621.143:16219): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636621.156:16220): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636621.156:16221): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636621.157:16222): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=76938 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636621.187:16223): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636621.188:16224): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636621.209:16225): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636621.209:16226): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636621.210:16227): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=76959 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636621.246:16228): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636621.246:16229): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636621.259:16230): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636621.259:16231): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636621.261:16232): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=76974 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636621.285:16233): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636621.286:16234): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636621.299:16235): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636621.299:16236): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636621.301:16237): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=76989 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636621.360:16238): pid=77004 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636621.361:16239): pid=77004 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F64616771766D6F7875746B747A7178717779766D6562616E61766B70766F79203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363632312E313434363931322D37353939372D36313333373434323639333536382F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636621.368:16240): pid=77004 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636621.370:16241): pid=77004 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636621.574:16242): pid=77004 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636621.575:16243): pid=77004 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636621.577:16244): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636621.579:16245): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636621.591:16246): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636621.591:16247): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636621.593:16248): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=77009 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636621.614:16249): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636621.614:16250): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636621.884:16251): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636621.884:16252): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636621.889:16253): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=77024 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636621.909:16254): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636621.910:16255): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636621.921:16256): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636621.921:16257): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636621.925:16258): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=77038 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636621.956:16259): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636621.956:16260): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636621.976:16261): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636621.977:16262): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636621.978:16263): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=77059 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636622.016:16264): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636622.017:16265): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636622.031:16266): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636622.031:16267): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636622.033:16268): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=77073 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636622.056:16269): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636622.056:16270): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636622.070:16271): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636622.070:16272): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636622.071:16273): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=77088 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636622.133:16274): pid=77103 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636622.133:16275): pid=77103 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6164727665667A7078776661656374616D686D6F6B636C727A7270666B6D6B77203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363632312E3931313338392D37353939372D3233343136353331323535393431322F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636622.134:16276): pid=77103 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636622.135:16277): pid=77103 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636622.308:16278): pid=77103 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636622.308:16279): pid=77103 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636622.311:16280): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636622.311:16281): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636622.334:16282): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636622.334:16283): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636622.336:16284): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=77108 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636622.361:16285): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636622.362:16286): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636622.594:16287): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636622.595:16288): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636622.596:16289): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=77124 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636622.616:16290): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636622.616:16291): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636622.629:16292): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636622.630:16293): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636622.631:16294): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=77138 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636622.656:16295): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636622.656:16296): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636622.675:16297): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636622.675:16298): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636622.677:16299): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=77159 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636622.712:16300): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636622.713:16301): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636622.725:16302): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636622.725:16303): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636622.727:16304): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=77173 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636622.748:16305): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636622.748:16306): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636622.761:16307): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636622.762:16308): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636622.763:16309): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=77188 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636622.825:16310): pid=77203 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636622.826:16311): pid=77203 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7278756E616D617578786161666F65677368647079766E6F68737A7263726877203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363632322E363138303737332D37353939372D31303138373033393334323332392F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636622.826:16312): pid=77203 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636622.828:16313): pid=77203 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636623.000:16314): pid=77203 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636623.000:16315): pid=77203 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636623.003:16316): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636623.003:16317): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636623.015:16318): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636623.015:16319): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636623.016:16320): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=77207 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636623.040:16321): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636623.040:16322): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636623.241:16323): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636623.241:16324): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636623.243:16325): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=77223 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636623.270:16326): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636623.270:16327): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636623.283:16328): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636623.283:16329): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636623.284:16330): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=77237 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636623.317:16331): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636623.320:16332): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636623.335:16333): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636623.335:16334): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636623.336:16335): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=77258 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636623.373:16336): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636623.373:16337): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636623.387:16338): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636623.387:16339): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636623.388:16340): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=77272 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636623.411:16341): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636623.411:16342): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636623.426:16343): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636623.426:16344): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636623.427:16345): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=77287 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636623.493:16346): pid=77302 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636623.494:16347): pid=77302 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F7A726B7471756D666C62766C776C6A6C68786F687A64656D666D65637A6D73203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363632332E323732333735332D37353939372D3237313934313437363636333834332F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636623.494:16348): pid=77302 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636623.496:16349): pid=77302 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636623.682:16350): pid=77302 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636623.682:16351): pid=77302 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636623.685:16352): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636623.686:16353): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636623.699:16354): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636623.699:16355): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636623.700:16356): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=77306 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636623.723:16357): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636623.723:16358): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636623.933:16359): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636623.934:16360): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636623.935:16361): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=77321 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636623.956:16362): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636623.957:16363): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636623.967:16364): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636623.967:16365): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636623.968:16366): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=77335 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636623.996:16367): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636623.996:16368): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636624.013:16369): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636624.013:16370): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636624.014:16371): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=77356 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636624.048:16372): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636624.048:16373): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636624.062:16374): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636624.062:16375): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636624.063:16376): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=77370 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636624.084:16377): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636624.084:16378): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636624.097:16379): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636624.098:16380): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636624.099:16381): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=77385 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636624.153:16382): pid=77400 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636624.153:16383): pid=77400 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D786D6E7076757166617078626275667A6C637572796170786B676A6A626D767A203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363632332E3935383433392D37353939372D3233383334363335373237363137342F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636624.154:16384): pid=77400 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636624.158:16385): pid=77400 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636624.320:16386): pid=77400 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636624.320:16387): pid=77400 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636624.323:16388): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636624.323:16389): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636624.334:16390): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636624.334:16391): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636624.335:16392): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=77404 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636624.356:16393): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636624.356:16394): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636624.561:16395): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636624.561:16396): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636624.562:16397): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=77419 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636624.586:16398): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636624.586:16399): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636624.597:16400): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636624.597:16401): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636624.598:16402): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=77433 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636624.621:16403): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636624.621:16404): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636624.640:16405): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636624.640:16406): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636624.641:16407): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=77454 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636624.675:16408): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636624.675:16409): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636624.690:16410): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636624.690:16411): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636624.692:16412): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=77468 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636624.714:16413): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636624.714:16414): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636624.727:16415): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636624.727:16416): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636624.728:16417): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=77483 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636624.785:16418): pid=77498 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636624.785:16419): pid=77498 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D77646770686B7172617379706776776A65776A70676A797375787472656D6364203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363632342E3538373639362D37353939372D36353839383631343233373734322F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636624.786:16420): pid=77498 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636624.788:16421): pid=77498 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636624.958:16422): pid=77498 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636624.958:16423): pid=77498 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636624.961:16424): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636624.961:16425): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636624.973:16426): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636624.973:16427): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636624.973:16428): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=77502 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636624.992:16429): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636624.993:16430): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636625.208:16431): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636625.208:16432): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636625.209:16433): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=77517 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636625.228:16434): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636625.229:16435): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636625.241:16436): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636625.241:16437): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636625.242:16438): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=77531 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636625.269:16439): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636625.269:16440): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636625.286:16441): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636625.286:16442): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636625.287:16443): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=77552 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636625.318:16444): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636625.319:16445): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636625.331:16446): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636625.331:16447): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636625.332:16448): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=77566 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636625.353:16449): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636625.353:16450): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636625.364:16451): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636625.364:16452): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636625.365:16453): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=77581 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636625.425:16454): pid=77596 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636625.425:16455): pid=77596 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A6B76726A62796B7262637668686E6A73787A766273786A6B787578656F6D64203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363632352E323330353633322D37353939372D383734333736343033373530302F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636625.426:16456): pid=77596 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636625.427:16457): pid=77596 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636625.593:16458): pid=77596 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636625.593:16459): pid=77596 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636625.596:16460): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636625.596:16461): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636625.608:16462): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636625.608:16463): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636625.609:16464): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=77600 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636625.629:16465): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636625.630:16466): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636625.896:16467): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636625.897:16468): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636625.898:16469): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=77615 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636625.921:16470): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636625.921:16471): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636625.936:16472): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636625.936:16473): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636625.937:16474): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=77629 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636625.975:16475): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636625.976:16476): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636625.992:16477): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636625.992:16478): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636625.993:16479): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=77650 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636626.032:16480): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636626.032:16481): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636626.047:16482): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636626.047:16483): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636626.051:16484): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=77664 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636626.068:16485): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636626.068:16486): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636626.081:16487): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636626.081:16488): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636626.082:16489): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=77679 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636626.136:16490): pid=77694 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636626.137:16491): pid=77694 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7564726A61697163647261716B74686C7864646165707868656E7A626B687677203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363632352E393232373537362D37353939372D3131313133393138353634363037352F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636626.137:16492): pid=77694 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636626.140:16493): pid=77694 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636626.347:16494): pid=77694 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636626.348:16495): pid=77694 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636626.351:16496): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636626.351:16497): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636626.362:16498): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636626.362:16499): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636626.363:16500): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=77698 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636626.387:16501): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636626.387:16502): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636626.603:16503): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636626.604:16504): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636626.604:16505): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=77713 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636626.623:16506): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636626.623:16507): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636626.637:16508): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636626.637:16509): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636626.638:16510): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=77727 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636626.665:16511): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636626.665:16512): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636626.680:16513): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636626.680:16514): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636626.681:16515): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=77748 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636626.712:16516): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636626.712:16517): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636626.725:16518): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636626.725:16519): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636626.726:16520): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=77762 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636626.746:16521): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636626.747:16522): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636626.760:16523): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636626.760:16524): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636626.761:16525): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=77777 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636626.818:16526): pid=77792 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636626.818:16527): pid=77792 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C6C6D65787A7773797A6C786C6D676F676778646C7068686B7965736F626963203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363632362E363237383232362D37353939372D3230383730323033323033353738382F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636626.819:16528): pid=77792 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636626.820:16529): pid=77792 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636626.994:16530): pid=77792 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636626.994:16531): pid=77792 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636626.997:16532): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636626.997:16533): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636627.010:16534): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636627.010:16535): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636627.011:16536): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=77796 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636627.032:16537): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636627.032:16538): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636627.263:16539): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636627.263:16540): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636627.264:16541): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=77811 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636627.287:16542): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636627.288:16543): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636627.298:16544): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636627.298:16545): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636627.300:16546): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=77827 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636627.326:16547): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636627.326:16548): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636627.343:16549): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636627.343:16550): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636627.344:16551): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=77848 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636627.377:16552): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636627.377:16553): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636627.393:16554): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636627.393:16555): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636627.394:16556): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=77862 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636627.416:16557): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636627.416:16558): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636627.429:16559): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636627.430:16560): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636627.431:16561): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=77877 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636627.486:16562): pid=77892 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636627.487:16563): pid=77892 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D76636C6778737071737764767A6C676E6164736C686A7676777A686C6E687466203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363632372E323839303830362D37353939372D35343937333937303433383837382F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636627.487:16564): pid=77892 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636627.488:16565): pid=77892 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636627.665:16566): pid=77892 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636627.665:16567): pid=77892 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636627.668:16568): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636627.668:16569): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636627.679:16570): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636627.679:16571): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636627.680:16572): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=77896 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636627.703:16573): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636627.704:16574): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636627.929:16575): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636627.929:16576): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636627.930:16577): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=77911 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636627.950:16578): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636627.950:16579): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636627.960:16580): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636627.960:16581): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636627.961:16582): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=77925 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636627.984:16583): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636627.984:16584): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636628.003:16585): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636628.003:16586): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636628.004:16587): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=77946 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636628.036:16588): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636628.036:16589): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636628.048:16590): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636628.048:16591): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636628.049:16592): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=77960 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636628.072:16593): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636628.073:16594): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636628.083:16595): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636628.083:16596): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636628.085:16597): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=77975 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636628.143:16598): pid=77990 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636628.143:16599): pid=77990 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D766C66696C6A727170686A63776C737972646B68786F66676473657474697765203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363632372E3935313936342D37353939372D3231383537313739353136333235382F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636628.144:16600): pid=77990 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636628.145:16601): pid=77990 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636628.317:16602): pid=77990 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636628.317:16603): pid=77990 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636628.320:16604): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636628.320:16605): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636628.333:16606): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636628.333:16607): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636628.334:16608): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=77994 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636628.355:16609): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636628.355:16610): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636628.585:16611): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636628.586:16612): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636628.587:16613): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=78009 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636628.607:16614): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636628.607:16615): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636628.618:16616): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636628.618:16617): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636628.619:16618): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=78023 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636628.643:16619): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636628.643:16620): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636628.659:16621): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636628.659:16622): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636628.660:16623): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=78044 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636628.692:16624): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636628.693:16625): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636628.706:16626): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636628.706:16627): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636628.707:16628): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=78058 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636628.733:16629): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636628.733:16630): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636628.743:16631): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636628.743:16632): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636628.744:16633): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=78073 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636628.800:16634): pid=78088 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636628.800:16635): pid=78088 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D78776A6F626E696D7A636169627374616D6F7261776F7A68706B736B6E786D6E203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363632382E363038373137372D37353939372D31333936323637343634323032392F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636628.800:16636): pid=78088 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636628.802:16637): pid=78088 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636628.973:16638): pid=78088 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636628.973:16639): pid=78088 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636628.975:16640): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636628.975:16641): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636628.986:16642): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636628.986:16643): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636628.987:16644): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=78093 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636629.007:16645): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636629.008:16646): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636629.246:16647): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636629.247:16648): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636629.248:16649): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=78109 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636629.269:16650): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636629.269:16651): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636629.280:16652): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636629.280:16653): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636629.282:16654): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=78123 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636629.304:16655): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636629.304:16656): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636629.321:16657): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636629.321:16658): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636629.323:16659): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=78144 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636629.354:16660): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636629.354:16661): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636629.366:16662): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636629.366:16663): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636629.367:16664): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=78158 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636629.389:16665): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636629.389:16666): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636629.399:16667): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636629.399:16668): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636629.400:16669): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=78173 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636629.461:16670): pid=78188 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636629.462:16671): pid=78188 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A617A667A6D766966757264706A6D61756E75647876716D6B6A6C7973646267203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363632392E3237303335312D37353939372D32313232313438343430303835392F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636629.462:16672): pid=78188 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636629.464:16673): pid=78188 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636629.645:16674): pid=78188 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636629.646:16675): pid=78188 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636629.648:16676): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636629.648:16677): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636629.660:16678): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636629.660:16679): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636629.661:16680): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=78192 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636629.680:16681): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636629.681:16682): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636629.931:16683): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636629.932:16684): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636629.933:16685): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=78207 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636629.955:16686): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636629.955:16687): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636629.967:16688): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636629.967:16689): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636629.968:16690): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=78221 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636629.993:16691): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636629.993:16692): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636630.012:16693): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636630.012:16694): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636630.013:16695): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=78242 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636630.049:16696): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636630.049:16697): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636630.062:16698): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636630.063:16699): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636630.064:16700): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=78256 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636630.086:16701): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636630.087:16702): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636630.100:16703): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636630.100:16704): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636630.101:16705): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=78271 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636630.157:16706): pid=78286 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636630.157:16707): pid=78286 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D62767A676B7A7872616D75747673666D6F776E676D6C65707769796D79766F203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363632392E3935363833312D37353939372D3236303639393234393238343932332F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636630.157:16708): pid=78286 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636630.159:16709): pid=78286 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636630.318:16710): pid=78286 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636630.318:16711): pid=78286 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636630.321:16712): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636630.322:16713): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636630.332:16714): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636630.332:16715): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636630.333:16716): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=78290 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636630.354:16717): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636630.355:16718): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636630.560:16719): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636630.560:16720): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636630.561:16721): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=78305 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636630.581:16722): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636630.581:16723): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636630.592:16724): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636630.593:16725): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636630.594:16726): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=78319 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636630.621:16727): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636630.621:16728): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636630.639:16729): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636630.639:16730): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636630.640:16731): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=78340 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636630.671:16732): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636630.672:16733): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636630.685:16734): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636630.685:16735): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636630.686:16736): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=78354 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636630.707:16737): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636630.707:16738): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636630.720:16739): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636630.720:16740): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636630.721:16741): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=78369 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636630.776:16742): pid=78384 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636630.776:16743): pid=78384 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D78736E6E7A6D7574716A6D6D72716A686970736F696D73757576616D676E7671203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363633302E353832363836342D37353939372D3230363136333138393634343931372F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636630.777:16744): pid=78384 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636630.778:16745): pid=78384 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636630.940:16746): pid=78384 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636630.943:16747): pid=78384 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636630.945:16748): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636630.945:16749): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636630.956:16750): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636630.956:16751): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636630.957:16752): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=78388 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636630.977:16753): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636630.977:16754): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636631.170:16755): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636631.170:16756): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636631.171:16757): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=78403 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636631.190:16758): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636631.190:16759): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636631.200:16760): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636631.200:16761): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636631.201:16762): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=78417 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636631.227:16763): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636631.227:16764): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636631.243:16765): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636631.244:16766): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636631.245:16767): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=78438 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636631.278:16768): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636631.278:16769): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636631.290:16770): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636631.290:16771): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636631.291:16772): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=78452 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636631.310:16773): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636631.310:16774): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636631.321:16775): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636631.322:16776): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636631.323:16777): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=78467 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636631.381:16778): pid=78482 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636631.381:16779): pid=78482 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A6D677570706C6C62777264616C687470696B7064616E6F767A6F7365736366203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363633312E313931353738392D37353939372D3234393036303432343536353739322F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636631.382:16780): pid=78482 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636631.384:16781): pid=78482 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636631.573:16782): pid=78482 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636631.573:16783): pid=78482 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636631.576:16784): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636631.577:16785): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636631.587:16786): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636631.587:16787): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636631.589:16788): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=78486 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636631.610:16789): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636631.610:16790): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636631.818:16791): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636631.818:16792): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636631.819:16793): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=78501 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636631.837:16794): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636631.838:16795): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636631.849:16796): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636631.849:16797): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636631.850:16798): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=78515 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636631.873:16799): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636631.874:16800): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636631.890:16801): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636631.890:16802): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636631.891:16803): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=78536 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636631.923:16804): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636631.923:16805): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636631.935:16806): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636631.935:16807): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636631.936:16808): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=78550 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636631.956:16809): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636631.956:16810): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636631.968:16811): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636631.968:16812): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636631.969:16813): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=78565 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636632.027:16814): pid=78580 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636632.027:16815): pid=78580 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A62756C6B6765687A7A6C71616971706D78626F7377637174646F747A667863203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363633312E383339353233332D37353939372D3130303036323133303737333438372F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636632.027:16816): pid=78580 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636632.029:16817): pid=78580 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636632.221:16818): pid=78580 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636632.221:16819): pid=78580 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636632.225:16820): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636632.226:16821): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636632.237:16822): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636632.237:16823): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636632.238:16824): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=78584 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636632.260:16825): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636632.261:16826): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636632.465:16827): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636632.465:16828): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636632.467:16829): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=78599 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636632.487:16830): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636632.487:16831): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636632.500:16832): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636632.500:16833): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636632.501:16834): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=78613 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636632.526:16835): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636632.526:16836): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636632.545:16837): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636632.545:16838): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636632.546:16839): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=78634 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636632.585:16840): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636632.585:16841): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636632.601:16842): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636632.601:16843): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636632.602:16844): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=78648 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636632.626:16845): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636632.626:16846): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636632.640:16847): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636632.640:16848): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636632.642:16849): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=78663 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636632.703:16850): pid=78678 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636632.703:16851): pid=78678 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6668616578766C67637970646563676B796A6B6A7778746D666F7865736C707A203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363633322E343839333537352D37353939372D3137383835303138323234343334352F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636632.703:16852): pid=78678 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636632.705:16853): pid=78678 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636632.892:16854): pid=78678 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636632.892:16855): pid=78678 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636632.895:16856): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636632.895:16857): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636632.907:16858): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636632.907:16859): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636632.908:16860): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=78682 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636632.931:16861): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636632.931:16862): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636633.137:16863): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636633.137:16864): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636633.138:16865): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=78697 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636633.159:16866): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636633.159:16867): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636633.171:16868): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636633.171:16869): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636633.172:16870): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=78711 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636633.198:16871): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636633.198:16872): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636633.218:16873): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636633.219:16874): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636633.220:16875): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=78732 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636633.262:16876): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636633.263:16877): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636633.275:16878): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636633.276:16879): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636633.277:16880): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=78746 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636633.305:16881): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636633.305:16882): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636633.319:16883): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636633.320:16884): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636633.321:16885): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=78761 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636633.381:16886): pid=78776 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636633.382:16887): pid=78776 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D676E6665637A766F6163626D6B6F7A7567707A75737767716C736D777276626F203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363633332E313631343334322D37353939372D3135333032373830303236393335372F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636633.382:16888): pid=78776 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636633.384:16889): pid=78776 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636633.561:16890): pid=78776 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636633.561:16891): pid=78776 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636633.564:16892): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636633.565:16893): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636633.577:16894): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636633.577:16895): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636633.578:16896): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=78780 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636633.601:16897): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636633.601:16898): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636633.860:16899): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636633.860:16900): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636633.861:16901): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=78795 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636633.888:16902): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636633.889:16903): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636633.899:16904): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636633.900:16905): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636633.901:16906): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=78809 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636633.934:16907): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636633.934:16908): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636633.954:16909): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636633.954:16910): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636633.955:16911): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=78830 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636633.987:16912): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636633.987:16913): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636633.999:16914): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636633.999:16915): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636634.000:16916): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=78844 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636634.028:16917): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636634.028:16918): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636634.040:16919): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636634.040:16920): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636634.041:16921): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=78859 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636634.097:16922): pid=78874 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636634.098:16923): pid=78874 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A70706E757A716D6C716B7570666364707A62636B766F74716D65726F64637A203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363633332E383930353136352D37353939372D3134303238333231393937313938392F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636634.099:16924): pid=78874 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636634.101:16925): pid=78874 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636634.294:16926): pid=78874 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636634.294:16927): pid=78874 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636634.297:16928): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636634.298:16929): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636634.310:16930): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636634.310:16931): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636634.311:16932): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=78878 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636634.332:16933): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636634.332:16934): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636634.539:16935): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636634.539:16936): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636634.540:16937): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=78893 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636634.559:16938): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636634.560:16939): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636634.572:16940): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636634.572:16941): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636634.574:16942): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=78907 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636634.600:16943): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636634.600:16944): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636634.619:16945): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636634.619:16946): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636634.620:16947): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=78928 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636634.658:16948): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636634.658:16949): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636634.670:16950): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636634.670:16951): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636634.671:16952): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=78943 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636634.695:16953): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636634.695:16954): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636634.707:16955): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636634.707:16956): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636634.708:16957): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=78958 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636634.767:16958): pid=78973 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636634.767:16959): pid=78973 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D67716D66716B6369627A73636668726D6D656969706273657777727A67777177203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363633342E3536313733322D37353939372D32393636363635303535313839342F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636634.767:16960): pid=78973 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636634.771:16961): pid=78973 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636634.944:16962): pid=78973 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636634.944:16963): pid=78973 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636634.947:16964): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636634.947:16965): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636634.959:16966): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636634.959:16967): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636634.960:16968): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=78977 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636634.981:16969): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636634.981:16970): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636635.431:16971): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636635.431:16972): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636635.432:16973): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=78997 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636635.456:16974): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636635.456:16975): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636635.472:16976): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636635.472:16977): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636635.473:16978): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=79011 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636635.504:16979): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636635.504:16980): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636635.577:16981): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636635.578:16982): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636635.579:16983): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=79032 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636635.629:16984): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636635.629:16985): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636635.644:16986): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636635.645:16987): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636635.646:16988): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=79047 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636635.675:16989): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636635.675:16990): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636635.687:16991): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636635.687:16992): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636635.688:16993): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=79062 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636635.745:16994): pid=79077 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636635.745:16995): pid=79077 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E6476637A756A7A766B7369776778766E616762656A616772776C75676F6165203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363633352E343538333332332D37383939352D38343438303536313534323839302F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636635.746:16996): pid=79077 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636635.748:16997): pid=79077 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636635.946:16998): pid=79077 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636635.947:16999): pid=79077 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636635.949:17000): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636635.949:17001): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636635.971:17002): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636635.971:17003): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636635.972:17004): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=79082 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636635.996:17005): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636635.996:17006): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636636.011:17007): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636636.012:17008): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636636.013:17009): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=79096 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636636.036:17010): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636636.036:17011): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636636.056:17012): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636636.056:17013): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636636.057:17014): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=79112 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636636.094:17015): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636636.094:17016): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636636.108:17017): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636636.108:17018): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636636.109:17019): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=79126 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636636.133:17020): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636636.133:17021): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636636.145:17022): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636636.145:17023): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636636.146:17024): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=79141 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636636.201:17025): pid=79156 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636636.202:17026): pid=79156 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F6E7267636C717878747A7872726D66786C796E6F7867747268796463796F78203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363633352E343538333332332D37383939352D38343438303536313534323839302F416E736962616C6C5A5F636F70792E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636636.202:17027): pid=79156 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636636.205:17028): pid=79156 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636636.380:17029): pid=79156 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636636.380:17030): pid=79156 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636636.382:17031): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636636.383:17032): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636636.396:17033): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636636.396:17034): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636636.397:17035): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=79160 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636636.422:17036): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636636.422:17037): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636636.691:17038): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636636.691:17039): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636636.692:17040): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=79177 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636636.711:17041): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636636.711:17042): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636636.721:17043): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636636.722:17044): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636636.723:17045): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=79191 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636636.745:17046): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636636.745:17047): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636636.762:17048): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636636.762:17049): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636636.763:17050): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=79212 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636636.798:17051): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636636.798:17052): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636636.810:17053): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636636.810:17054): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636636.812:17055): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=79226 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636636.837:17056): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636636.837:17057): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636636.852:17058): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636636.852:17059): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636636.854:17060): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=79241 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636636.913:17061): pid=79256 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636636.913:17062): pid=79256 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd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exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636636.914:17063): pid=79256 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636636.916:17064): pid=79256 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=BPF msg=audit(1744636637.733:17065): prog-id=486 op=LOAD type=SYSCALL msg=audit(1744636637.733:17065): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00023fc48 a2=90 a3=0 items=0 ppid=79294 pid=79304 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636637.733:17065): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66666335353033323839356365656563386161346333333030 type=BPF msg=audit(1744636637.734:17066): prog-id=487 op=LOAD type=SYSCALL msg=audit(1744636637.734:17066): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c00023f9d8 a2=90 a3=0 items=0 ppid=79294 pid=79304 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636637.734:17066): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66666335353033323839356365656563386161346333333030 type=BPF msg=audit(1744636637.734:17067): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636637.735:17068): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636637.735:17069): prog-id=488 op=LOAD type=SYSCALL msg=audit(1744636637.735:17069): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00023feb0 a2=90 a3=0 items=0 ppid=79294 pid=79304 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636637.735:17069): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66666335353033323839356365656563386161346333333030 type=BPF msg=audit(1744636637.992:17070): prog-id=489 op=LOAD type=BPF msg=audit(1744636637.993:17071): prog-id=490 op=LOAD type=SYSCALL msg=audit(1744636637.993:17071): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00011dad0 a2=90 a3=0 items=0 ppid=79391 pid=79408 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636637.993:17071): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62316634393633333735623165663136366362303934393338 type=BPF msg=audit(1744636637.993:17072): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636637.994:17073): prog-id=491 op=LOAD type=SYSCALL msg=audit(1744636637.994:17073): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00011dc48 a2=90 a3=0 items=0 ppid=79391 pid=79408 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636637.994:17073): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62316634393633333735623165663136366362303934393338 type=BPF msg=audit(1744636637.994:17074): prog-id=492 op=LOAD type=SYSCALL msg=audit(1744636637.994:17074): arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=c00011d9d8 a2=90 a3=0 items=0 ppid=79391 pid=79408 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636637.994:17074): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62316634393633333735623165663136366362303934393338 type=BPF msg=audit(1744636637.994:17075): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636637.994:17076): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636637.994:17077): prog-id=493 op=LOAD type=SYSCALL msg=audit(1744636637.994:17077): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00011deb0 a2=90 a3=0 items=0 ppid=79391 pid=79408 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636637.994:17077): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62316634393633333735623165663136366362303934393338 type=USER_END msg=audit(1744636638.158:17078): pid=79256 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636638.158:17079): pid=79256 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636638.161:17080): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636638.161:17081): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636638.174:17082): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636638.174:17083): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636638.175:17084): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=79595 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636638.203:17085): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636638.203:17086): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=BPF msg=audit(1744636638.499:17087): prog-id=0 op=UNLOAD type=SERVICE_START msg=audit(1744636638.630:17088): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dnf-makecache comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1744636638.630:17089): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dnf-makecache comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1744636638.814:17090): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636638.814:17091): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636638.815:17092): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=79797 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636638.834:17093): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636638.834:17094): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636638.844:17095): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636638.844:17096): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636638.845:17097): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=79811 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636638.869:17098): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636638.869:17099): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636638.887:17100): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636638.887:17101): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636638.888:17102): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=79832 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636638.923:17103): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636638.923:17104): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636638.935:17105): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636638.935:17106): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636638.936:17107): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=79846 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636638.959:17108): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636638.959:17109): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636638.970:17110): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636638.970:17111): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636638.972:17112): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=79861 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636639.029:17113): pid=79876 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636639.029:17114): pid=79876 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D786F7577786E7A766C7A7A796B626B78766B6D6169676572696C6E657A6B6D77203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363633382E3833353730342D37393733392D33303831383435373336353938362F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636639.030:17115): pid=79876 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636639.033:17116): pid=79876 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636639.911:17117): pid=79876 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636639.911:17118): pid=79876 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636639.914:17119): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636639.914:17120): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636639.925:17121): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636639.925:17122): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636639.926:17123): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=79907 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636639.948:17124): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636639.948:17125): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636640.188:17126): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636640.188:17127): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636640.189:17128): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=79924 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636640.213:17129): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636640.213:17130): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636640.225:17131): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636640.225:17132): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636640.226:17133): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=79938 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636640.248:17134): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636640.249:17135): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636640.265:17136): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636640.265:17137): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636640.268:17138): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=79959 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636640.300:17139): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636640.300:17140): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636640.312:17141): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636640.312:17142): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636640.313:17143): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=79973 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636640.333:17144): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636640.333:17145): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636640.348:17146): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636640.348:17147): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636640.350:17148): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=79988 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636640.408:17149): pid=80003 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636640.409:17150): pid=80003 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D646F7A77766B6D6D656D65726B6E76616F747478756A77796E6270666E686E203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363634302E323135313137352D37393932322D3232383536323239303636373737342F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636640.409:17151): pid=80003 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636640.411:17152): pid=80003 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636640.677:17153): pid=80003 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636640.677:17154): pid=80003 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636640.680:17155): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636640.680:17156): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636640.696:17157): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636640.696:17158): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636640.697:17159): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=80007 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636640.716:17160): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636640.716:17161): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636640.947:17162): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636640.947:17163): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636640.948:17164): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=80024 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636640.975:17165): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636640.976:17166): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636640.988:17167): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636640.988:17168): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636640.989:17169): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=80038 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636641.013:17170): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636641.013:17171): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636641.173:17172): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636641.173:17173): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636641.175:17174): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=80060 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636641.212:17175): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636641.213:17176): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636641.226:17177): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636641.226:17178): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636641.227:17179): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=80074 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636641.248:17180): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636641.248:17181): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636641.261:17182): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636641.262:17183): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636641.263:17184): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=80089 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636641.334:17185): pid=80104 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636641.334:17186): pid=80104 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D696E6C6369766F64757A6E6B67757062786B71686A72666471686D7262777569203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363634302E393737363232372D38303032322D3133383038393534383434303439312F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636641.334:17187): pid=80104 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636641.336:17188): pid=80104 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636641.528:17189): pid=80104 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636641.528:17190): pid=80104 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636641.537:17191): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636641.539:17192): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636641.554:17193): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636641.554:17194): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636641.555:17195): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=80109 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636641.578:17196): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636641.579:17197): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636641.590:17198): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636641.590:17199): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636641.591:17200): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=80123 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636641.612:17201): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636641.613:17202): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636641.629:17203): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636641.629:17204): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636641.630:17205): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=80139 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636641.665:17206): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636641.665:17207): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636641.679:17208): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636641.679:17209): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636641.681:17210): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=80153 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636641.705:17211): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636641.705:17212): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636641.718:17213): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636641.719:17214): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636641.720:17215): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=80168 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636641.785:17216): pid=80183 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636641.785:17217): pid=80183 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D66786C737571626C6969637578717A626A7769796D7A6F78657A6E676B787976203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363634302E393737363232372D38303032322D3133383038393534383434303439312F416E736962616C6C5A5F636F70792E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636641.786:17218): pid=80183 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636641.787:17219): pid=80183 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636641.971:17220): pid=80183 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636641.972:17221): pid=80183 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636641.974:17222): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636641.975:17223): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636641.987:17224): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636641.988:17225): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636641.989:17226): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=80187 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636642.012:17227): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636642.012:17228): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636642.249:17229): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636642.249:17230): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636642.250:17231): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=80204 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636642.270:17232): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636642.270:17233): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636642.280:17234): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636642.280:17235): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636642.281:17236): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=80218 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636642.307:17237): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636642.307:17238): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636642.324:17239): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636642.324:17240): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636642.325:17241): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=80239 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636642.355:17242): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636642.356:17243): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636642.367:17244): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636642.367:17245): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636642.368:17246): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=80253 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636642.393:17247): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636642.393:17248): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636642.403:17249): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636642.403:17250): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636642.405:17251): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=80268 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636642.458:17252): pid=80283 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636642.458:17253): pid=80283 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd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exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636642.459:17254): pid=80283 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636642.461:17255): pid=80283 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=BPF msg=audit(1744636643.160:17256): prog-id=494 op=LOAD type=BPF msg=audit(1744636643.161:17257): prog-id=495 op=LOAD type=SYSCALL msg=audit(1744636643.161:17257): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001b7ad0 a2=90 a3=0 items=0 ppid=80318 pid=80329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636643.161:17257): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36316565663865646663353735373262633565336539373961 type=BPF msg=audit(1744636643.161:17258): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636643.161:17259): prog-id=496 op=LOAD type=SYSCALL msg=audit(1744636643.161:17259): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001b7c48 a2=90 a3=0 items=0 ppid=80318 pid=80329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636643.161:17259): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36316565663865646663353735373262633565336539373961 type=BPF msg=audit(1744636643.161:17260): prog-id=497 op=LOAD type=SYSCALL msg=audit(1744636643.161:17260): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001b79d8 a2=90 a3=0 items=0 ppid=80318 pid=80329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636643.161:17260): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36316565663865646663353735373262633565336539373961 type=BPF msg=audit(1744636643.161:17261): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636643.161:17262): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636643.161:17263): prog-id=498 op=LOAD type=SYSCALL msg=audit(1744636643.161:17263): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001b7eb0 a2=90 a3=0 items=0 ppid=80318 pid=80329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636643.161:17263): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36316565663865646663353735373262633565336539373961 type=USER_END msg=audit(1744636643.260:17264): pid=80283 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636643.261:17265): pid=80283 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636643.264:17266): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636643.264:17267): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636643.276:17268): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636643.276:17269): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636643.277:17270): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=80402 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636643.312:17271): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636643.312:17272): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636644.372:17273): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636644.372:17274): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636644.373:17275): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=80479 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636644.395:17276): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636644.395:17277): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636644.405:17278): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636644.405:17279): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636644.406:17280): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=80493 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636644.429:17281): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636644.432:17282): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636644.445:17283): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636644.445:17284): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636644.446:17285): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=80514 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636644.479:17286): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636644.480:17287): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636644.496:17288): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636644.496:17289): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636644.498:17290): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=80528 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636644.522:17291): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636644.522:17292): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636644.533:17293): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636644.533:17294): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636644.535:17295): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=80543 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636644.596:17296): pid=80558 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636644.596:17297): pid=80558 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D637569726C77656C6664776876766F66796977767164797475736B6B67737163203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363634342E333936323438382D38303437372D3139343932373438313033323330302F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636644.597:17298): pid=80558 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636644.601:17299): pid=80558 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636644.933:17300): pid=80558 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636644.935:17301): pid=80558 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636644.939:17302): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636644.941:17303): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636644.954:17304): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636644.954:17305): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636644.955:17306): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=80571 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636644.979:17307): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636644.979:17308): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636645.258:17309): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636645.258:17310): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636645.262:17311): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=80587 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636645.278:17312): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636645.278:17313): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636645.292:17314): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636645.292:17315): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636645.296:17316): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=80601 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636645.315:17317): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636645.315:17318): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636645.332:17319): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636645.332:17320): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636645.333:17321): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=80622 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636645.368:17322): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636645.368:17323): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636645.380:17324): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636645.380:17325): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636645.381:17326): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=80636 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636645.399:17327): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636645.400:17328): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636645.411:17329): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636645.411:17330): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636645.412:17331): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=80651 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636645.474:17332): pid=80666 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636645.474:17333): pid=80666 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B67776E787275726C67766364626A687A696D767478716A697A75756A767A74203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363634352E323830313832362D38303437372D3232323239313832343337363834382F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636645.474:17334): pid=80666 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636645.479:17335): pid=80666 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636645.791:17336): pid=80666 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636645.792:17337): pid=80666 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636645.798:17338): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636645.799:17339): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636645.810:17340): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636645.810:17341): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636645.811:17342): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=80679 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636645.832:17343): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636645.832:17344): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636646.110:17345): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636646.110:17346): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636646.111:17347): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=80695 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636646.131:17348): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636646.132:17349): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636646.143:17350): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636646.143:17351): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636646.144:17352): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=80709 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636646.184:17353): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636646.184:17354): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636646.207:17355): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636646.207:17356): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636646.208:17357): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=80730 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636646.273:17358): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636646.273:17359): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636646.287:17360): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636646.287:17361): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636646.288:17362): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=80744 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636646.329:17363): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636646.329:17364): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636646.341:17365): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636646.341:17366): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636646.343:17367): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=80759 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636646.412:17368): pid=80774 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636646.413:17369): pid=80774 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D61726D6170776A6A73736A656A787178646C707979667073686C616C74746276203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363634362E3133333533352D38303437372D3137323834363936313231393031362F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636646.413:17370): pid=80774 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636646.415:17371): pid=80774 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636646.734:17372): pid=80774 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636646.734:17373): pid=80774 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636646.736:17374): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636646.737:17375): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636646.752:17376): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636646.752:17377): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636646.753:17378): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=80791 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636646.777:17379): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636646.778:17380): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636647.130:17381): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636647.130:17382): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636647.134:17383): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=80809 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636647.157:17384): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636647.157:17385): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636647.167:17386): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636647.167:17387): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636647.168:17388): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=80824 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636647.211:17389): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636647.212:17390): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636647.230:17391): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636647.232:17392): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636647.235:17393): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=80845 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636647.285:17394): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636647.285:17395): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636647.303:17396): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636647.303:17397): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636647.304:17398): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=80859 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636647.327:17399): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636647.327:17400): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636647.340:17401): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636647.340:17402): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636647.343:17403): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=80876 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636647.429:17404): pid=80892 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636647.429:17405): pid=80892 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D756262776E6B6372706268676F6A6C6F667762756175686B6E7476736B747466203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363634372E313539303236312D38303437372D37393432323631383836373038362F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636647.429:17406): pid=80892 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636647.432:17407): pid=80892 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636705.138:17408): pid=80892 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636705.138:17409): pid=80892 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636705.141:17410): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636705.141:17411): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636705.158:17412): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636705.158:17413): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636705.159:17414): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=81582 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636705.182:17415): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636705.182:17416): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636705.537:17417): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636705.538:17418): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636705.539:17419): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=81599 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636705.563:17420): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636705.563:17421): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636705.580:17422): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636705.580:17423): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636705.583:17424): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=81613 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636705.606:17425): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636705.606:17426): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636705.622:17427): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636705.622:17428): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636705.624:17429): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=81634 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636705.651:17430): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636705.651:17431): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636705.664:17432): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636705.664:17433): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636705.665:17434): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=81649 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636705.686:17435): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636705.686:17436): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636705.697:17437): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636705.697:17438): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636705.702:17439): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=81664 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636705.769:17440): pid=81679 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636705.769:17441): pid=81679 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7074636C696A726C727068656F78656E696962697A646566656F6B7864617173203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363730352E3536383132382D38303437372D3230313836333336353030383832392F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636705.769:17442): pid=81679 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636705.773:17443): pid=81679 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636723.766:17444): pid=81679 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636723.766:17445): pid=81679 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636723.770:17446): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636723.770:17447): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636723.782:17448): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636723.782:17449): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636723.783:17450): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=81908 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636723.809:17451): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636723.809:17452): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636724.312:17453): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636724.312:17454): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636724.313:17455): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=81928 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636724.333:17456): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636724.333:17457): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636724.345:17458): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636724.345:17459): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636724.346:17460): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=81942 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636724.370:17461): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636724.370:17462): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636724.387:17463): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636724.387:17464): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636724.388:17465): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=81963 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636724.417:17466): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636724.417:17467): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636724.430:17468): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636724.430:17469): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636724.431:17470): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=81977 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636724.452:17471): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636724.452:17472): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636724.464:17473): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636724.464:17474): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636724.465:17475): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=81992 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636724.524:17476): pid=82007 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636724.525:17477): pid=82007 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B6C736D6C776B627469616E6761797A656B766B7867786C676872646768636A203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363732342E333336343236352D38313932362D3135383932353434333934303338312F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636724.525:17478): pid=82007 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636724.527:17479): pid=82007 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636724.700:17480): pid=82007 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636724.701:17481): pid=82007 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636724.703:17482): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636724.704:17483): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636724.715:17484): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636724.715:17485): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636724.717:17486): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=82011 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636724.740:17487): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636724.740:17488): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636725.402:17489): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636725.402:17490): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636725.404:17491): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=82040 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636725.427:17492): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636725.427:17493): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636725.440:17494): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636725.441:17495): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636725.442:17496): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=82054 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636725.468:17497): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636725.468:17498): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636725.539:17499): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636725.539:17500): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636725.540:17501): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=82075 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636725.578:17502): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636725.578:17503): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636725.590:17504): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636725.590:17505): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636725.591:17506): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=82089 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636725.618:17507): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636725.618:17508): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636725.630:17509): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636725.631:17510): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636725.632:17511): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=82104 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636725.694:17512): pid=82119 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636725.695:17513): pid=82119 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D637973696A736764687362767976696F71706471667663757A6C6C627577746A203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363732352E343330313938322D38323033382D38383134383737353135353036372F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636725.695:17514): pid=82119 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636725.698:17515): pid=82119 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636725.856:17516): pid=82119 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636725.856:17517): pid=82119 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636725.859:17518): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636725.860:17519): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636725.878:17520): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636725.878:17521): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636725.880:17522): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=82124 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636725.906:17523): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636725.907:17524): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636725.919:17525): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636725.919:17526): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636725.920:17527): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=82138 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636725.942:17528): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636725.942:17529): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636725.958:17530): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636725.958:17531): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636725.959:17532): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=82154 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636725.995:17533): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636725.995:17534): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636726.011:17535): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636726.011:17536): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636726.012:17537): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=82168 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636726.047:17538): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636726.047:17539): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636726.064:17540): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636726.064:17541): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636726.065:17542): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=82183 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636726.126:17543): pid=82198 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636726.127:17544): pid=82198 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D65636E76737970636C61777979666E73667A78746B6272667762706E656C7764203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363732352E343330313938322D38323033382D38383134383737353135353036372F416E736962616C6C5A5F636F70792E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636726.127:17545): pid=82198 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636726.131:17546): pid=82198 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636726.336:17547): pid=82198 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636726.337:17548): pid=82198 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636726.339:17549): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636726.339:17550): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636726.352:17551): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636726.352:17552): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636726.353:17553): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=82202 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636726.373:17554): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636726.373:17555): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636726.674:17556): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636726.674:17557): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636726.675:17558): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=82221 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636726.696:17559): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636726.696:17560): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636726.709:17561): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636726.709:17562): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636726.710:17563): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=82235 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636726.734:17564): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636726.734:17565): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636726.754:17566): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636726.754:17567): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636726.755:17568): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=82256 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636726.795:17569): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636726.795:17570): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636726.809:17571): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636726.809:17572): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636726.811:17573): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=82270 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636726.834:17574): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636726.834:17575): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636726.849:17576): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636726.849:17577): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636726.851:17578): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=82285 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636726.908:17579): pid=82300 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636726.908:17580): pid=82300 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F6C6E796C796673706F707773616D6376637466767A6B6463617072696C6F61203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363732362E363939303831372D38323231392D3230303139303230383439363339342F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636726.909:17581): pid=82300 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636726.910:17582): pid=82300 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636727.127:17583): pid=82300 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636727.127:17584): pid=82300 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636727.130:17585): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636727.130:17586): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636727.143:17587): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636727.143:17588): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636727.144:17589): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=82304 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636727.167:17590): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636727.167:17591): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636727.868:17592): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636727.868:17593): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636727.870:17594): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=82334 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636727.895:17595): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636727.895:17596): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636727.906:17597): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636727.907:17598): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636727.908:17599): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=82348 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636727.939:17600): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636727.939:17601): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636727.958:17602): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636727.958:17603): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636727.959:17604): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=82369 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636727.991:17605): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636727.991:17606): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636728.004:17607): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636728.004:17608): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636728.005:17609): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=82383 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636728.025:17610): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636728.025:17611): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636728.035:17612): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636728.035:17613): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636728.037:17614): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=82398 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636728.089:17615): pid=82413 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636728.089:17616): pid=82413 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D67627765746B6B66666D6F6C61746A6B6D6576697966746E7A6A736B62686567203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363732372E383937303538372D38323333312D3130323532323833333135383939352F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636728.089:17617): pid=82413 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636728.091:17618): pid=82413 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636728.273:17619): pid=82413 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636728.273:17620): pid=82413 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636728.278:17621): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636728.278:17622): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636728.290:17623): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636728.290:17624): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636728.291:17625): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=82417 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636728.315:17626): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636728.315:17627): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636728.847:17628): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636728.847:17629): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636728.850:17630): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=82442 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636728.877:17631): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636728.884:17632): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636728.892:17633): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636728.893:17634): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636728.894:17635): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=82456 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636728.917:17636): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636728.917:17637): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636729.043:17638): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636729.043:17639): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636729.044:17640): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=82477 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636729.077:17641): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636729.077:17642): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636729.090:17643): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636729.091:17644): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636729.092:17645): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=82491 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636729.115:17646): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636729.115:17647): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636729.126:17648): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636729.127:17649): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636729.128:17650): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=82506 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636729.185:17651): pid=82521 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636729.186:17652): pid=82521 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A706D6869736F6B747667656E7370647A69676275756D6C78776F6E65666272203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363732382E383832303630382D38323434302D3136333534333435343735313237322F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636729.186:17653): pid=82521 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636729.188:17654): pid=82521 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636729.385:17655): pid=82521 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636729.385:17656): pid=82521 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636729.387:17657): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636729.390:17658): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636729.407:17659): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636729.407:17660): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636729.408:17661): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=82546 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636729.454:17662): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636729.457:17663): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636729.475:17664): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636729.475:17665): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636729.477:17666): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=82560 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636729.516:17667): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636729.516:17668): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636729.533:17669): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636729.533:17670): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636729.534:17671): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=82576 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636729.570:17672): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636729.570:17673): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636729.587:17674): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636729.587:17675): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636729.591:17676): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=82590 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636729.619:17677): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636729.619:17678): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636729.632:17679): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636729.633:17680): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636729.634:17681): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=82605 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636729.690:17682): pid=82626 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636729.690:17683): pid=82626 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D77616C7372786577636670727A716B776F79726D6F776A7066717765787A6670203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363732382E383832303630382D38323434302D3136333534333435343735313237322F416E736962616C6C5A5F636F70792E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636729.691:17684): pid=82626 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636729.692:17685): pid=82626 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636729.866:17686): pid=82626 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636729.866:17687): pid=82626 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636729.869:17688): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636729.869:17689): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636729.881:17690): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636729.882:17691): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636729.883:17692): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=82651 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636729.910:17693): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636729.910:17694): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636730.208:17695): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636730.208:17696): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636730.209:17697): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=82700 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636730.231:17698): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636730.232:17699): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636730.242:17700): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636730.243:17701): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636730.244:17702): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=82720 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636730.267:17703): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636730.267:17704): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636730.283:17705): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636730.283:17706): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636730.284:17707): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=82741 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636730.329:17708): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636730.329:17709): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636730.344:17710): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636730.344:17711): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636730.345:17712): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=82755 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636730.366:17713): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636730.366:17714): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636730.377:17715): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636730.377:17716): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636730.379:17717): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=82770 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636730.440:17718): pid=82786 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636730.440:17719): pid=82786 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D68636179616B67696B6879717A716E6A676F636E656F67777068786B6D647071203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734343633363733302E3233343338352D38323637362D3236303436383330313632373733342F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636730.441:17720): pid=82786 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636730.444:17721): pid=82786 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636730.620:17722): pid=82786 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636730.621:17723): pid=82786 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636730.623:17724): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636730.624:17725): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636730.636:17726): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636730.636:17727): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636730.638:17728): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=82794 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636730.685:17729): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636730.685:17730): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636731.006:17731): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636731.006:17732): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636731.008:17733): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=82811 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636731.034:17734): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636731.034:17735): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636731.049:17736): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636731.050:17737): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636731.051:17738): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=82825 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636731.218:17739): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636731.219:17740): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636731.235:17741): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636731.236:17742): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636731.237:17743): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=82896 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636731.270:17744): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636731.270:17745): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636731.286:17746): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636731.286:17747): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636731.287:17748): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=82938 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636731.312:17749): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636731.312:17750): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636731.324:17751): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636731.325:17752): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636731.330:17753): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=82956 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636731.385:17754): pid=82972 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636731.386:17755): pid=82972 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd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exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636731.386:17756): pid=82972 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636731.388:17757): pid=82972 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=BPF msg=audit(1744636733.611:17758): prog-id=499 op=LOAD type=SYSCALL msg=audit(1744636733.611:17758): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00023fc48 a2=90 a3=0 items=0 ppid=83018 pid=83029 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636733.611:17758): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66633662316632666434396165636562313431346662323132 type=BPF msg=audit(1744636733.611:17759): prog-id=500 op=LOAD type=SYSCALL msg=audit(1744636733.611:17759): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c00023f9d8 a2=90 a3=0 items=0 ppid=83018 pid=83029 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636733.611:17759): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66633662316632666434396165636562313431346662323132 type=BPF msg=audit(1744636733.611:17760): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636733.611:17761): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636733.611:17762): prog-id=501 op=LOAD type=SYSCALL msg=audit(1744636733.611:17762): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00023feb0 a2=90 a3=0 items=0 ppid=83018 pid=83029 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636733.611:17762): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66633662316632666434396165636562313431346662323132 type=BPF msg=audit(1744636733.997:17763): prog-id=502 op=LOAD type=BPF msg=audit(1744636734.000:17764): prog-id=503 op=LOAD type=SYSCALL msg=audit(1744636734.000:17764): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000239ad0 a2=90 a3=0 items=0 ppid=83261 pid=83292 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636734.000:17764): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39373734383166326337326463636632616430306135313065 type=BPF msg=audit(1744636734.000:17765): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636734.002:17766): prog-id=504 op=LOAD type=BPF msg=audit(1744636734.003:17767): prog-id=505 op=LOAD type=SYSCALL msg=audit(1744636734.003:17767): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000239ad0 a2=90 a3=0 items=0 ppid=83232 pid=83250 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636734.003:17767): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36366663643635363934333962323765353163323164336565 type=BPF msg=audit(1744636734.003:17768): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636734.003:17769): prog-id=506 op=LOAD type=SYSCALL msg=audit(1744636734.003:17769): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000239c48 a2=90 a3=0 items=0 ppid=83232 pid=83250 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636734.003:17769): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36366663643635363934333962323765353163323164336565 type=BPF msg=audit(1744636734.003:17770): prog-id=507 op=LOAD type=SYSCALL msg=audit(1744636734.003:17770): arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=c0002399d8 a2=90 a3=0 items=0 ppid=83232 pid=83250 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636734.003:17770): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36366663643635363934333962323765353163323164336565 type=BPF msg=audit(1744636734.003:17771): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636734.003:17772): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636734.003:17773): prog-id=508 op=LOAD type=SYSCALL msg=audit(1744636734.003:17773): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000239eb0 a2=90 a3=0 items=0 ppid=83232 pid=83250 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636734.003:17773): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36366663643635363934333962323765353163323164336565 type=BPF msg=audit(1744636734.004:17774): prog-id=509 op=LOAD type=SYSCALL msg=audit(1744636734.004:17774): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000239c48 a2=90 a3=0 items=0 ppid=83261 pid=83292 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636734.004:17774): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39373734383166326337326463636632616430306135313065 type=BPF msg=audit(1744636734.004:17775): prog-id=510 op=LOAD type=SYSCALL msg=audit(1744636734.004:17775): arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=c0002399d8 a2=90 a3=0 items=0 ppid=83261 pid=83292 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636734.004:17775): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39373734383166326337326463636632616430306135313065 type=BPF msg=audit(1744636734.004:17776): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636734.004:17777): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636734.004:17778): prog-id=511 op=LOAD type=SYSCALL msg=audit(1744636734.004:17778): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000239eb0 a2=90 a3=0 items=0 ppid=83261 pid=83292 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636734.004:17778): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39373734383166326337326463636632616430306135313065 type=BPF msg=audit(1744636734.046:17779): prog-id=512 op=LOAD type=SYSCALL msg=audit(1744636734.046:17779): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001c9c48 a2=90 a3=0 items=0 ppid=83289 pid=83361 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636734.046:17779): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61626431633034663265366339363463656265613563306662 type=BPF msg=audit(1744636734.046:17780): prog-id=513 op=LOAD type=SYSCALL msg=audit(1744636734.046:17780): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c0001c99d8 a2=90 a3=0 items=0 ppid=83289 pid=83361 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636734.046:17780): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61626431633034663265366339363463656265613563306662 type=BPF msg=audit(1744636734.046:17781): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636734.046:17782): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636734.046:17783): prog-id=514 op=LOAD type=SYSCALL msg=audit(1744636734.046:17783): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001c9eb0 a2=90 a3=0 items=0 ppid=83289 pid=83361 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636734.046:17783): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61626431633034663265366339363463656265613563306662 type=BPF msg=audit(1744636734.382:17784): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636734.385:17785): prog-id=515 op=LOAD type=SYSCALL msg=audit(1744636734.385:17785): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c00012dc48 a2=90 a3=0 items=0 ppid=83677 pid=83728 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636734.385:17785): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61383363376361396463393763653330323366653236336161 type=BPF msg=audit(1744636734.385:17786): prog-id=516 op=LOAD type=SYSCALL msg=audit(1744636734.385:17786): arch=c000003e syscall=321 success=yes exit=22 a0=5 a1=c00012d9d8 a2=90 a3=0 items=0 ppid=83677 pid=83728 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636734.385:17786): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61383363376361396463393763653330323366653236336161 type=BPF msg=audit(1744636734.386:17787): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636734.386:17788): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636734.386:17789): prog-id=517 op=LOAD type=SYSCALL msg=audit(1744636734.386:17789): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c00012deb0 a2=90 a3=0 items=0 ppid=83677 pid=83728 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636734.386:17789): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61383363376361396463393763653330323366653236336161 type=USER_END msg=audit(1744636734.664:17790): pid=82972 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636734.664:17791): pid=82972 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636734.668:17792): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636734.668:17793): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636734.681:17794): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636734.681:17795): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636734.682:17796): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=83988 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636734.716:17797): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636734.717:17798): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636735.685:17799): pid=84079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=84079 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1744636735.692:17800): pid=84078 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=84079 suid=74 rport=55312 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1744636735.692:17801): pid=84078 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=84079 suid=74 rport=55312 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1744636735.846:17802): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sssd-kcm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_AUTH msg=audit(1744636735.924:17803): pid=84078 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744636735.924:17804): pid=84078 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:70:6d:53:7b:b9:b1:0c:0b:97:46:57:0a:90:24:61:0d:60:dd:24:ba:9a:35:b7:5d:bd:60:94:bc:89:4a:f4:2f exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1744636735.986:17805): pid=84078 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744636735.992:17806): pid=84078 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=84079 suid=74 rport=55312 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1744636735.994:17807): pid=84078 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1744636735.995:17808): pid=84078 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=30 res=1UID="root" OLD-AUID="unset" AUID="rocky" type=SYSCALL msg=audit(1744636735.995:17808): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffd68e898a0 a2=4 a3=3e8 items=0 ppid=12346 pid=84078 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=30 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636735.995:17808): proctitle=737368643A20726F636B79205B707269765D type=USER_ROLE_CHANGE msg=audit(1744636736.000:17809): pid=84078 uid=0 auid=1000 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_START msg=audit(1744636736.147:17810): pid=84078 uid=0 auid=1000 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636736.148:17811): pid=84083 uid=0 auid=1000 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=84083 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=CRED_ACQ msg=audit(1744636736.149:17812): pid=84083 uid=0 auid=1000 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_LOGIN msg=audit(1744636736.192:17813): pid=84078 uid=0 auid=1000 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636736.192:17814): pid=84078 uid=0 auid=1000 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636736.193:17815): pid=84078 uid=0 auid=1000 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=84084 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636736.235:17816): pid=84078 uid=0 auid=1000 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=84083 suid=1000 rport=55312 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636736.236:17817): pid=84078 uid=0 auid=1000 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=84083 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636736.244:17818): pid=84078 uid=0 auid=1000 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" type=CRED_DISP msg=audit(1744636736.245:17819): pid=84078 uid=0 auid=1000 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_END msg=audit(1744636736.245:17820): pid=84078 uid=0 auid=1000 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636736.245:17821): pid=84078 uid=0 auid=1000 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636736.245:17822): pid=84078 uid=0 auid=1000 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=84078 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=CRYPTO_KEY_USER msg=audit(1744636736.288:17823): pid=84099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=84099 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1744636736.291:17824): pid=84098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=84099 suid=74 rport=55314 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1744636736.291:17825): pid=84098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=84099 suid=74 rport=55314 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1744636736.387:17826): pid=84098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744636736.387:17827): pid=84098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:70:6d:53:7b:b9:b1:0c:0b:97:46:57:0a:90:24:61:0d:60:dd:24:ba:9a:35:b7:5d:bd:60:94:bc:89:4a:f4:2f exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1744636736.446:17828): pid=84098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744636736.447:17829): pid=84098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=84099 suid=74 rport=55314 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1744636736.450:17830): pid=84098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1744636736.450:17831): pid=84098 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=31 res=1UID="root" OLD-AUID="unset" AUID="rocky" type=SYSCALL msg=audit(1744636736.450:17831): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffc5afa9e50 a2=4 a3=3e8 items=0 ppid=12346 pid=84098 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=31 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636736.450:17831): proctitle=737368643A20726F636B79205B707269765D type=USER_ROLE_CHANGE msg=audit(1744636736.452:17832): pid=84098 uid=0 auid=1000 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_START msg=audit(1744636736.482:17833): pid=84098 uid=0 auid=1000 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636736.484:17834): pid=84101 uid=0 auid=1000 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=84101 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=CRED_ACQ msg=audit(1744636736.485:17835): pid=84101 uid=0 auid=1000 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_LOGIN msg=audit(1744636736.527:17836): pid=84098 uid=0 auid=1000 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636736.527:17837): pid=84098 uid=0 auid=1000 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636736.528:17838): pid=84098 uid=0 auid=1000 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=84102 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=BPF msg=audit(1744636736.867:17839): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636737.301:17840): prog-id=518 op=LOAD type=SYSCALL msg=audit(1744636737.301:17840): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c000123c48 a2=90 a3=0 items=0 ppid=84189 pid=84200 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636737.301:17840): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61383363376361396463393763653330323366653236336161 type=BPF msg=audit(1744636737.302:17841): prog-id=519 op=LOAD type=SYSCALL msg=audit(1744636737.302:17841): arch=c000003e syscall=321 success=yes exit=22 a0=5 a1=c0001239d8 a2=90 a3=0 items=0 ppid=84189 pid=84200 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636737.302:17841): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61383363376361396463393763653330323366653236336161 type=BPF msg=audit(1744636737.302:17842): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636737.302:17843): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636737.302:17844): prog-id=520 op=LOAD type=SYSCALL msg=audit(1744636737.302:17844): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c000123eb0 a2=90 a3=0 items=0 ppid=84189 pid=84200 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636737.302:17844): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61383363376361396463393763653330323366653236336161 type=BPF msg=audit(1744636737.866:17845): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636738.216:17846): prog-id=521 op=LOAD type=SYSCALL msg=audit(1744636738.216:17846): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c0001c1c48 a2=90 a3=0 items=0 ppid=84407 pid=84419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636738.216:17846): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61383363376361396463393763653330323366653236336161 type=BPF msg=audit(1744636738.217:17847): prog-id=522 op=LOAD type=SYSCALL msg=audit(1744636738.217:17847): arch=c000003e syscall=321 success=yes exit=22 a0=5 a1=c0001c19d8 a2=90 a3=0 items=0 ppid=84407 pid=84419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636738.217:17847): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61383363376361396463393763653330323366653236336161 type=BPF msg=audit(1744636738.217:17848): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636738.217:17849): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636738.217:17850): prog-id=523 op=LOAD type=SYSCALL msg=audit(1744636738.217:17850): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c0001c1eb0 a2=90 a3=0 items=0 ppid=84407 pid=84419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636738.217:17850): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61383363376361396463393763653330323366653236336161 type=BPF msg=audit(1744636738.585:17851): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636739.195:17852): prog-id=524 op=LOAD type=SYSCALL msg=audit(1744636739.195:17852): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c00012dc48 a2=90 a3=0 items=0 ppid=84638 pid=84649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636739.195:17852): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61383363376361396463393763653330323366653236336161 type=BPF msg=audit(1744636739.195:17853): prog-id=525 op=LOAD type=SYSCALL msg=audit(1744636739.195:17853): arch=c000003e syscall=321 success=yes exit=22 a0=5 a1=c00012d9d8 a2=90 a3=0 items=0 ppid=84638 pid=84649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636739.195:17853): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61383363376361396463393763653330323366653236336161 type=BPF msg=audit(1744636739.195:17854): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636739.195:17855): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636739.195:17856): prog-id=526 op=LOAD type=SYSCALL msg=audit(1744636739.195:17856): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c00012deb0 a2=90 a3=0 items=0 ppid=84638 pid=84649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636739.195:17856): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61383363376361396463393763653330323366653236336161 type=BPF msg=audit(1744636739.553:17857): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636740.544:17858): prog-id=527 op=LOAD type=SYSCALL msg=audit(1744636740.544:17858): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c000243c48 a2=90 a3=0 items=0 ppid=84850 pid=84861 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636740.544:17858): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61383363376361396463393763653330323366653236336161 type=BPF msg=audit(1744636740.544:17859): prog-id=528 op=LOAD type=SYSCALL msg=audit(1744636740.544:17859): arch=c000003e syscall=321 success=yes exit=22 a0=5 a1=c0002439d8 a2=90 a3=0 items=0 ppid=84850 pid=84861 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636740.544:17859): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61383363376361396463393763653330323366653236336161 type=BPF msg=audit(1744636740.545:17860): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636740.545:17861): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636740.545:17862): prog-id=529 op=LOAD type=SYSCALL msg=audit(1744636740.545:17862): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c000243eb0 a2=90 a3=0 items=0 ppid=84850 pid=84861 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636740.545:17862): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61383363376361396463393763653330323366653236336161 type=BPF msg=audit(1744636740.991:17863): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636742.860:17864): prog-id=530 op=LOAD type=SYSCALL msg=audit(1744636742.860:17864): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c0001a3c48 a2=90 a3=0 items=0 ppid=85061 pid=85072 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636742.860:17864): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61383363376361396463393763653330323366653236336161 type=BPF msg=audit(1744636742.860:17865): prog-id=531 op=LOAD type=SYSCALL msg=audit(1744636742.860:17865): arch=c000003e syscall=321 success=yes exit=22 a0=5 a1=c0001a39d8 a2=90 a3=0 items=0 ppid=85061 pid=85072 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636742.860:17865): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61383363376361396463393763653330323366653236336161 type=BPF msg=audit(1744636742.860:17866): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636742.860:17867): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636742.860:17868): prog-id=532 op=LOAD type=SYSCALL msg=audit(1744636742.860:17868): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c0001a3eb0 a2=90 a3=0 items=0 ppid=85061 pid=85072 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636742.860:17868): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61383363376361396463393763653330323366653236336161 type=BPF msg=audit(1744636743.668:17869): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636746.808:17870): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636747.015:17871): prog-id=533 op=LOAD type=SYSCALL msg=audit(1744636747.015:17871): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c0001c9c48 a2=90 a3=0 items=0 ppid=85317 pid=85328 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636747.015:17871): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61383363376361396463393763653330323366653236336161 type=BPF msg=audit(1744636747.015:17872): prog-id=534 op=LOAD type=SYSCALL msg=audit(1744636747.015:17872): arch=c000003e syscall=321 success=yes exit=22 a0=5 a1=c0001c99d8 a2=90 a3=0 items=0 ppid=85317 pid=85328 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636747.015:17872): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61383363376361396463393763653330323366653236336161 type=BPF msg=audit(1744636747.015:17873): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636747.015:17874): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636747.015:17875): prog-id=535 op=LOAD type=SYSCALL msg=audit(1744636747.015:17875): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c0001c9eb0 a2=90 a3=0 items=0 ppid=85317 pid=85328 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636747.015:17875): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61383363376361396463393763653330323366653236336161 type=AVC msg=audit(1744636747.474:17876): avc: denied { read } for pid=85509 comm="systemd-sysctl" name="60-tf-node-init.conf" dev="vda5" ino=10096909 scontext=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 type=AVC msg=audit(1744636747.474:17877): avc: denied { open } for pid=85511 comm="systemd-sysctl" path="/etc/sysctl.d/60-tf-node-init.conf" dev="vda5" ino=10096909 scontext=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 type=SYSCALL msg=audit(1744636747.474:17877): arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=5642b7edacb0 a2=80000 a3=0 items=0 ppid=85479 pid=85511 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-sysctl" exe="/usr/lib/systemd/systemd-sysctl" subj=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=openat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636747.474:17877): proctitle=2F7573722F6C69622F73797374656D642F73797374656D642D73797363746C002D2D7072656669783D6E65742F697076342F636F6E662F706B743200002D2D7072656669783D6E65742F697076342F6E656967682F706B743200002D2D7072656669783D6E65742F697076362F636F6E662F706B743200002D2D707265666978 type=AVC msg=audit(1744636747.474:17878): avc: denied { getattr } for pid=85511 comm="systemd-sysctl" path="/etc/sysctl.d/60-tf-node-init.conf" dev="vda5" ino=10096909 scontext=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 type=SYSCALL msg=audit(1744636747.474:17878): arch=c000003e syscall=262 success=yes exit=0 a0=3 a1=7fc39f9b7f35 a2=7ffe65b08c40 a3=1000 items=0 ppid=85479 pid=85511 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-sysctl" exe="/usr/lib/systemd/systemd-sysctl" subj=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636747.474:17878): proctitle=2F7573722F6C69622F73797374656D642F73797374656D642D73797363746C002D2D7072656669783D6E65742F697076342F636F6E662F706B743200002D2D7072656669783D6E65742F697076342F6E656967682F706B743200002D2D7072656669783D6E65742F697076362F636F6E662F706B743200002D2D707265666978 type=SYSCALL msg=audit(1744636747.474:17876): arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=55fdc7308cb0 a2=80000 a3=0 items=0 ppid=85476 pid=85509 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-sysctl" exe="/usr/lib/systemd/systemd-sysctl" subj=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=openat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636747.474:17876): proctitle=2F7573722F6C69622F73797374656D642F73797374656D642D73797363746C002D2D7072656669783D6E65742F697076342F636F6E662F706B743100002D2D7072656669783D6E65742F697076342F6E656967682F706B743100002D2D7072656669783D6E65742F697076362F636F6E662F706B743100002D2D707265666978 type=AVC msg=audit(1744636747.474:17879): avc: denied { ioctl } for pid=85509 comm="systemd-sysctl" path="/etc/sysctl.d/60-tf-node-init.conf" dev="vda5" ino=10096909 ioctlcmd=0x5401 scontext=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 type=SYSCALL msg=audit(1744636747.474:17879): arch=c000003e syscall=16 success=no exit=-25 a0=3 a1=5401 a2=7ffcea84f650 a3=55fdc7302000 items=0 ppid=85476 pid=85509 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-sysctl" exe="/usr/lib/systemd/systemd-sysctl" subj=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=ioctl AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636747.474:17879): proctitle=2F7573722F6C69622F73797374656D642F73797374656D642D73797363746C002D2D7072656669783D6E65742F697076342F636F6E662F706B743100002D2D7072656669783D6E65742F697076342F6E656967682F706B743100002D2D7072656669783D6E65742F697076362F636F6E662F706B743100002D2D707265666978 type=SERVICE_START msg=audit(1744636747.699:17880): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1744636750.236:17881): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=setroubleshootd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1744636750.486:17882): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbus-:1.2-org.fedoraproject.SetroubleshootPrivileged@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=AVC msg=audit(1744636753.742:17883): avc: denied { read } for pid=86417 comm="systemd-sysctl" name="60-tf-node-init.conf" dev="vda5" ino=10096909 scontext=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 type=AVC msg=audit(1744636753.742:17883): avc: denied { open } for pid=86417 comm="systemd-sysctl" path="/etc/sysctl.d/60-tf-node-init.conf" dev="vda5" ino=10096909 scontext=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 type=SYSCALL msg=audit(1744636753.742:17883): arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=561e6372bcb0 a2=80000 a3=0 items=0 ppid=86416 pid=86417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-sysctl" exe="/usr/lib/systemd/systemd-sysctl" subj=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=openat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636753.742:17883): proctitle=2F7573722F6C69622F73797374656D642F73797374656D642D73797363746C002D2D7072656669783D6E65742F697076342F636F6E662F706B743000002D2D7072656669783D6E65742F697076342F6E656967682F706B743000002D2D7072656669783D6E65742F697076362F636F6E662F706B743000002D2D707265666978 type=AVC msg=audit(1744636753.742:17884): avc: denied { getattr } for pid=86417 comm="systemd-sysctl" path="/etc/sysctl.d/60-tf-node-init.conf" dev="vda5" ino=10096909 scontext=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 type=SYSCALL msg=audit(1744636753.742:17884): arch=c000003e syscall=262 success=yes exit=0 a0=3 a1=7f134abb7f35 a2=7ffc8ab859f0 a3=1000 items=0 ppid=86416 pid=86417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-sysctl" exe="/usr/lib/systemd/systemd-sysctl" subj=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636753.742:17884): proctitle=2F7573722F6C69622F73797374656D642F73797374656D642D73797363746C002D2D7072656669783D6E65742F697076342F636F6E662F706B743000002D2D7072656669783D6E65742F697076342F6E656967682F706B743000002D2D7072656669783D6E65742F697076362F636F6E662F706B743000002D2D707265666978 type=AVC msg=audit(1744636753.744:17885): avc: denied { ioctl } for pid=86417 comm="systemd-sysctl" path="/etc/sysctl.d/60-tf-node-init.conf" dev="vda5" ino=10096909 ioctlcmd=0x5401 scontext=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 type=SYSCALL msg=audit(1744636753.744:17885): arch=c000003e syscall=16 success=no exit=-25 a0=3 a1=5401 a2=7ffc8ab85af0 a3=561e63725000 items=0 ppid=86416 pid=86417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-sysctl" exe="/usr/lib/systemd/systemd-sysctl" subj=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=ioctl AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636753.744:17885): proctitle=2F7573722F6C69622F73797374656D642F73797374656D642D73797363746C002D2D7072656669783D6E65742F697076342F636F6E662F706B743000002D2D7072656669783D6E65742F697076342F6E656967682F706B743000002D2D7072656669783D6E65742F697076362F636F6E662F706B743000002D2D707265666978 type=USER_END msg=audit(1744636756.620:17886): pid=84098 uid=0 auid=1000 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636756.620:17887): pid=84098 uid=0 auid=1000 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636756.620:17888): pid=84098 uid=0 auid=1000 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=84101 suid=1000 rport=55314 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636756.621:17889): pid=84098 uid=0 auid=1000 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=84101 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636756.625:17890): pid=84098 uid=0 auid=1000 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" type=CRED_DISP msg=audit(1744636756.626:17891): pid=84098 uid=0 auid=1000 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636756.627:17892): pid=84098 uid=0 auid=1000 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=84098 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=CRYPTO_KEY_USER msg=audit(1744636756.661:17893): pid=86458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=86458 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1744636756.662:17894): pid=86457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=86458 suid=74 rport=48930 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1744636756.662:17895): pid=86457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=86458 suid=74 rport=48930 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1744636756.749:17896): pid=86457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744636756.749:17897): pid=86457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:70:6d:53:7b:b9:b1:0c:0b:97:46:57:0a:90:24:61:0d:60:dd:24:ba:9a:35:b7:5d:bd:60:94:bc:89:4a:f4:2f exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1744636756.789:17898): pid=86457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744636756.790:17899): pid=86457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=86458 suid=74 rport=48930 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1744636756.792:17900): pid=86457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1744636756.793:17901): pid=86457 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=32 res=1UID="root" OLD-AUID="unset" AUID="rocky" type=SYSCALL msg=audit(1744636756.793:17901): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffc80385330 a2=4 a3=3e8 items=0 ppid=12346 pid=86457 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=32 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636756.793:17901): proctitle=737368643A20726F636B79205B707269765D type=USER_ROLE_CHANGE msg=audit(1744636756.795:17902): pid=86457 uid=0 auid=1000 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_START msg=audit(1744636756.813:17903): pid=86457 uid=0 auid=1000 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636756.814:17904): pid=86461 uid=0 auid=1000 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=86461 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=CRED_ACQ msg=audit(1744636756.815:17905): pid=86461 uid=0 auid=1000 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_LOGIN msg=audit(1744636756.859:17906): pid=86457 uid=0 auid=1000 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636756.859:17907): pid=86457 uid=0 auid=1000 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636756.860:17908): pid=86457 uid=0 auid=1000 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=86462 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636756.896:17909): pid=86457 uid=0 auid=1000 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=86461 suid=1000 rport=48930 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636756.897:17910): pid=86457 uid=0 auid=1000 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=86461 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636756.900:17911): pid=86457 uid=0 auid=1000 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" type=CRED_DISP msg=audit(1744636756.900:17912): pid=86457 uid=0 auid=1000 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_END msg=audit(1744636756.901:17913): pid=86457 uid=0 auid=1000 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636756.901:17914): pid=86457 uid=0 auid=1000 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636756.901:17915): pid=86457 uid=0 auid=1000 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=86457 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=CRYPTO_KEY_USER msg=audit(1744636756.918:17916): pid=86477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=86477 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1744636756.919:17917): pid=86476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=86477 suid=74 rport=48932 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1744636756.919:17918): pid=86476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=86477 suid=74 rport=48932 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1744636757.001:17919): pid=86476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744636757.001:17920): pid=86476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:70:6d:53:7b:b9:b1:0c:0b:97:46:57:0a:90:24:61:0d:60:dd:24:ba:9a:35:b7:5d:bd:60:94:bc:89:4a:f4:2f exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1744636757.043:17921): pid=86476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744636757.043:17922): pid=86476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=86477 suid=74 rport=48932 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1744636757.045:17923): pid=86476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1744636757.045:17924): pid=86476 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=33 res=1UID="root" OLD-AUID="unset" AUID="rocky" type=SYSCALL msg=audit(1744636757.045:17924): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffc29d64ff0 a2=4 a3=3e8 items=0 ppid=12346 pid=86476 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=33 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636757.045:17924): proctitle=737368643A20726F636B79205B707269765D type=USER_ROLE_CHANGE msg=audit(1744636757.046:17925): pid=86476 uid=0 auid=1000 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_START msg=audit(1744636757.061:17926): pid=86476 uid=0 auid=1000 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636757.062:17927): pid=86479 uid=0 auid=1000 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=86479 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=CRED_ACQ msg=audit(1744636757.063:17928): pid=86479 uid=0 auid=1000 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_LOGIN msg=audit(1744636757.104:17929): pid=86476 uid=0 auid=1000 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636757.104:17930): pid=86476 uid=0 auid=1000 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636757.105:17931): pid=86476 uid=0 auid=1000 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=86480 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636757.201:17932): pid=86500 uid=1000 auid=1000 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636757.201:17933): pid=86500 uid=1000 auid=1000 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=73797374656D63746C2073746F70206368726F6E79642E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636757.202:17934): pid=86500 uid=1000 auid=1000 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636757.204:17935): pid=86500 uid=1000 auid=1000 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=SERVICE_STOP msg=audit(1744636757.217:17936): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=chronyd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1744636757.219:17937): pid=86500 uid=1000 auid=1000 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636757.219:17938): pid=86500 uid=1000 auid=1000 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=BPF msg=audit(1744636757.227:17939): prog-id=0 op=UNLOAD type=USER_ACCT msg=audit(1744636757.264:17940): pid=86508 uid=1000 auid=1000 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636757.264:17941): pid=86508 uid=1000 auid=1000 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=73797374656D63746C207374617274206368726F6E79642E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636757.264:17942): pid=86508 uid=1000 auid=1000 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636757.266:17943): pid=86508 uid=1000 auid=1000 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=BPF msg=audit(1744636757.283:17944): prog-id=536 op=LOAD type=SERVICE_START msg=audit(1744636757.457:17945): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=chronyd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1744636757.458:17946): pid=86508 uid=1000 auid=1000 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636757.459:17947): pid=86508 uid=1000 auid=1000 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=SERVICE_STOP msg=audit(1744636757.757:17948): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=AVC msg=audit(1744636761.444:17949): avc: denied { read } for pid=86529 comm="systemd-sysctl" name="60-tf-node-init.conf" dev="vda5" ino=10096909 scontext=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 type=AVC msg=audit(1744636761.444:17949): avc: denied { open } for pid=86529 comm="systemd-sysctl" path="/etc/sysctl.d/60-tf-node-init.conf" dev="vda5" ino=10096909 scontext=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 type=SYSCALL msg=audit(1744636761.444:17949): arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=561cec9f4cf0 a2=80000 a3=0 items=0 ppid=86527 pid=86529 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-sysctl" exe="/usr/lib/systemd/systemd-sysctl" subj=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=openat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636761.444:17949): proctitle=2F7573722F6C69622F73797374656D642F73797374656D642D73797363746C002D2D7072656669783D6E65742F697076342F636F6E662F746170657468302D39366562363000002D2D7072656669783D6E65742F697076342F6E656967682F746170657468302D39366562363000002D2D7072656669783D6E65742F69707636 type=AVC msg=audit(1744636761.444:17950): avc: denied { getattr } for pid=86529 comm="systemd-sysctl" path="/etc/sysctl.d/60-tf-node-init.conf" dev="vda5" ino=10096909 scontext=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 type=SYSCALL msg=audit(1744636761.444:17950): arch=c000003e syscall=262 success=yes exit=0 a0=3 a1=7f77bc9b7f35 a2=7ffe22ac2b70 a3=1000 items=0 ppid=86527 pid=86529 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-sysctl" exe="/usr/lib/systemd/systemd-sysctl" subj=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636761.444:17950): proctitle=2F7573722F6C69622F73797374656D642F73797374656D642D73797363746C002D2D7072656669783D6E65742F697076342F636F6E662F746170657468302D39366562363000002D2D7072656669783D6E65742F697076342F6E656967682F746170657468302D39366562363000002D2D7072656669783D6E65742F69707636 type=AVC msg=audit(1744636761.444:17951): avc: denied { ioctl } for pid=86529 comm="systemd-sysctl" path="/etc/sysctl.d/60-tf-node-init.conf" dev="vda5" ino=10096909 ioctlcmd=0x5401 scontext=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 type=SYSCALL msg=audit(1744636761.444:17951): arch=c000003e syscall=16 success=no exit=-25 a0=3 a1=5401 a2=7ffe22ac2c70 a3=561cec9ee040 items=0 ppid=86527 pid=86529 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-sysctl" exe="/usr/lib/systemd/systemd-sysctl" subj=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=ioctl AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636761.444:17951): proctitle=2F7573722F6C69622F73797374656D642F73797374656D642D73797363746C002D2D7072656669783D6E65742F697076342F636F6E662F746170657468302D39366562363000002D2D7072656669783D6E65742F697076342F6E656967682F746170657468302D39366562363000002D2D7072656669783D6E65742F69707636 type=BPF msg=audit(1744636766.553:17952): prog-id=537 op=LOAD type=BPF msg=audit(1744636766.554:17953): prog-id=538 op=LOAD type=SYSCALL msg=audit(1744636766.554:17953): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000123ad0 a2=90 a3=0 items=0 ppid=86559 pid=86570 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636766.554:17953): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163373834633262613435663266663332323862613562383964383736 type=BPF msg=audit(1744636766.554:17954): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636766.554:17955): prog-id=539 op=LOAD type=SYSCALL msg=audit(1744636766.554:17955): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000123c48 a2=90 a3=0 items=0 ppid=86559 pid=86570 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636766.554:17955): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163373834633262613435663266663332323862613562383964383736 type=BPF msg=audit(1744636766.554:17956): prog-id=540 op=LOAD type=SYSCALL msg=audit(1744636766.554:17956): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001239d8 a2=90 a3=0 items=0 ppid=86559 pid=86570 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636766.554:17956): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163373834633262613435663266663332323862613562383964383736 type=BPF msg=audit(1744636766.554:17957): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636766.554:17958): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636766.554:17959): prog-id=541 op=LOAD type=SYSCALL msg=audit(1744636766.554:17959): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000123eb0 a2=90 a3=0 items=0 ppid=86559 pid=86570 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636766.554:17959): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163373834633262613435663266663332323862613562383964383736 type=BPF msg=audit(1744636766.698:17960): prog-id=542 op=LOAD type=BPF msg=audit(1744636766.700:17961): prog-id=543 op=LOAD type=SYSCALL msg=audit(1744636766.700:17961): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001bbad0 a2=90 a3=0 items=0 ppid=86559 pid=86602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636766.700:17961): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6137656430666664636262623532303235316637336666646135373964 type=BPF msg=audit(1744636766.701:17962): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636766.701:17963): prog-id=544 op=LOAD type=SYSCALL msg=audit(1744636766.701:17963): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001bbc48 a2=90 a3=0 items=0 ppid=86559 pid=86602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636766.701:17963): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6137656430666664636262623532303235316637336666646135373964 type=BPF msg=audit(1744636766.701:17964): prog-id=545 op=LOAD type=SYSCALL msg=audit(1744636766.701:17964): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001bb9d8 a2=90 a3=0 items=0 ppid=86559 pid=86602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636766.701:17964): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6137656430666664636262623532303235316637336666646135373964 type=BPF msg=audit(1744636766.701:17965): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636766.702:17966): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636766.702:17967): prog-id=546 op=LOAD type=SYSCALL msg=audit(1744636766.702:17967): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001bbeb0 a2=90 a3=0 items=0 ppid=86559 pid=86602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636766.702:17967): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6137656430666664636262623532303235316637336666646135373964 type=NETFILTER_CFG msg=audit(1744636767.456:17968): table=filter family=2 entries=55 op=xt_replace pid=86657 subj=system_u:system_r:spc_t:s0 comm="iptables-restor" type=SYSCALL msg=audit(1744636767.456:17968): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55f823577aa0 items=0 ppid=25833 pid=86657 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636767.456:17968): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 type=NETFILTER_CFG msg=audit(1744636767.457:17969): table=nat family=2 entries=43 op=xt_replace pid=86657 subj=system_u:system_r:spc_t:s0 comm="iptables-restor" type=SYSCALL msg=audit(1744636767.457:17969): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55f82357bc60 items=0 ppid=25833 pid=86657 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636767.457:17969): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 type=SERVICE_STOP msg=audit(1744636772.596:17970): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbus-:1.2-org.fedoraproject.SetroubleshootPrivileged@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1744636772.621:17971): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=setroubleshootd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1744636777.510:17972): pid=86895 uid=1000 auid=1000 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636777.510:17973): pid=86895 uid=1000 auid=1000 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=73797374656D63746C2073746F70206368726F6E79642E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636777.511:17974): pid=86895 uid=1000 auid=1000 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636777.514:17975): pid=86895 uid=1000 auid=1000 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=SERVICE_STOP msg=audit(1744636777.525:17976): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=chronyd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1744636777.527:17977): pid=86895 uid=1000 auid=1000 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636777.528:17978): pid=86895 uid=1000 auid=1000 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=BPF msg=audit(1744636777.537:17979): prog-id=0 op=UNLOAD type=USER_ACCT msg=audit(1744636777.571:17980): pid=86905 uid=1000 auid=1000 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636777.571:17981): pid=86905 uid=1000 auid=1000 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=73797374656D63746C207374617274206368726F6E79642E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636777.571:17982): pid=86905 uid=1000 auid=1000 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636777.573:17983): pid=86905 uid=1000 auid=1000 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=BPF msg=audit(1744636777.585:17984): prog-id=547 op=LOAD type=SERVICE_START msg=audit(1744636777.767:17985): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=chronyd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1744636777.768:17986): pid=86905 uid=1000 auid=1000 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636777.768:17987): pid=86905 uid=1000 auid=1000 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=AVC msg=audit(1744636783.990:17988): avc: denied { read } for pid=86939 comm="systemd-sysctl" name="60-tf-node-init.conf" dev="vda5" ino=10096909 scontext=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 type=AVC msg=audit(1744636783.990:17988): avc: denied { open } for pid=86939 comm="systemd-sysctl" path="/etc/sysctl.d/60-tf-node-init.conf" dev="vda5" ino=10096909 scontext=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 type=SYSCALL msg=audit(1744636783.990:17988): arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=5650f2337cf0 a2=80000 a3=0 items=0 ppid=86935 pid=86939 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-sysctl" exe="/usr/lib/systemd/systemd-sysctl" subj=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=openat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636783.990:17988): proctitle=2F7573722F6C69622F73797374656D642F73797374656D642D73797363746C002D2D7072656669783D6E65742F697076342F636F6E662F746170657468302D62383338646500002D2D7072656669783D6E65742F697076342F6E656967682F746170657468302D62383338646500002D2D7072656669783D6E65742F69707636 type=AVC msg=audit(1744636783.991:17989): avc: denied { getattr } for pid=86939 comm="systemd-sysctl" path="/etc/sysctl.d/60-tf-node-init.conf" dev="vda5" ino=10096909 scontext=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 type=SYSCALL msg=audit(1744636783.991:17989): arch=c000003e syscall=262 success=yes exit=0 a0=3 a1=7f60835b7f35 a2=7fffc1140ec0 a3=1000 items=0 ppid=86935 pid=86939 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-sysctl" exe="/usr/lib/systemd/systemd-sysctl" subj=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636783.991:17989): proctitle=2F7573722F6C69622F73797374656D642F73797374656D642D73797363746C002D2D7072656669783D6E65742F697076342F636F6E662F746170657468302D62383338646500002D2D7072656669783D6E65742F697076342F6E656967682F746170657468302D62383338646500002D2D7072656669783D6E65742F69707636 type=AVC msg=audit(1744636783.991:17990): avc: denied { ioctl } for pid=86939 comm="systemd-sysctl" path="/etc/sysctl.d/60-tf-node-init.conf" dev="vda5" ino=10096909 ioctlcmd=0x5401 scontext=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 type=SYSCALL msg=audit(1744636783.991:17990): arch=c000003e syscall=16 success=no exit=-25 a0=3 a1=5401 a2=7fffc1140fc0 a3=5650f2331040 items=0 ppid=86935 pid=86939 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-sysctl" exe="/usr/lib/systemd/systemd-sysctl" subj=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=ioctl AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636783.991:17990): proctitle=2F7573722F6C69622F73797374656D642F73797374656D642D73797363746C002D2D7072656669783D6E65742F697076342F636F6E662F746170657468302D62383338646500002D2D7072656669783D6E65742F697076342F6E656967682F746170657468302D62383338646500002D2D7072656669783D6E65742F69707636 type=AVC msg=audit(1744636784.035:17991): avc: denied { read } for pid=86955 comm="systemd-sysctl" name="60-tf-node-init.conf" dev="vda5" ino=10096909 scontext=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 type=AVC msg=audit(1744636784.035:17991): avc: denied { open } for pid=86955 comm="systemd-sysctl" path="/etc/sysctl.d/60-tf-node-init.conf" dev="vda5" ino=10096909 scontext=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 type=SYSCALL msg=audit(1744636784.035:17991): arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=55fb0bfbbcf0 a2=80000 a3=0 items=0 ppid=86934 pid=86955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-sysctl" exe="/usr/lib/systemd/systemd-sysctl" subj=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=openat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636784.035:17991): proctitle=2F7573722F6C69622F73797374656D642F73797374656D642D73797363746C002D2D7072656669783D6E65742F697076342F636F6E662F746D70657468302D62383338646500002D2D7072656669783D6E65742F697076342F6E656967682F746D70657468302D62383338646500002D2D7072656669783D6E65742F69707636 type=AVC msg=audit(1744636784.035:17992): avc: denied { getattr } for pid=86955 comm="systemd-sysctl" path="/etc/sysctl.d/60-tf-node-init.conf" dev="vda5" ino=10096909 scontext=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 type=SYSCALL msg=audit(1744636784.035:17992): arch=c000003e syscall=262 success=yes exit=0 a0=3 a1=7fdc83fb7f35 a2=7ffc695abac0 a3=1000 items=0 ppid=86934 pid=86955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-sysctl" exe="/usr/lib/systemd/systemd-sysctl" subj=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636784.035:17992): proctitle=2F7573722F6C69622F73797374656D642F73797374656D642D73797363746C002D2D7072656669783D6E65742F697076342F636F6E662F746D70657468302D62383338646500002D2D7072656669783D6E65742F697076342F6E656967682F746D70657468302D62383338646500002D2D7072656669783D6E65742F69707636 type=AVC msg=audit(1744636784.035:17993): avc: denied { ioctl } for pid=86955 comm="systemd-sysctl" path="/etc/sysctl.d/60-tf-node-init.conf" dev="vda5" ino=10096909 ioctlcmd=0x5401 scontext=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 type=SYSCALL msg=audit(1744636784.035:17993): arch=c000003e syscall=16 success=no exit=-25 a0=3 a1=5401 a2=7ffc695abbc0 a3=55fb0bfb5040 items=0 ppid=86934 pid=86955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-sysctl" exe="/usr/lib/systemd/systemd-sysctl" subj=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=ioctl AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636784.035:17993): proctitle=2F7573722F6C69622F73797374656D642F73797374656D642D73797363746C002D2D7072656669783D6E65742F697076342F636F6E662F746D70657468302D62383338646500002D2D7072656669783D6E65742F697076342F6E656967682F746D70657468302D62383338646500002D2D7072656669783D6E65742F69707636 type=BPF msg=audit(1744636784.127:17994): prog-id=548 op=LOAD type=BPF msg=audit(1744636784.128:17995): prog-id=549 op=LOAD type=SYSCALL msg=audit(1744636784.128:17995): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c00011bad0 a2=90 a3=0 items=0 ppid=86957 pid=86974 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636784.128:17995): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3235363937396337643337316664663864323039623439613938313031 type=BPF msg=audit(1744636784.128:17996): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636784.128:17997): prog-id=550 op=LOAD type=SYSCALL msg=audit(1744636784.128:17997): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c00011bc48 a2=90 a3=0 items=0 ppid=86957 pid=86974 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636784.128:17997): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3235363937396337643337316664663864323039623439613938313031 type=BPF msg=audit(1744636784.129:17998): prog-id=551 op=LOAD type=SYSCALL msg=audit(1744636784.129:17998): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00011b9d8 a2=90 a3=0 items=0 ppid=86957 pid=86974 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636784.129:17998): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3235363937396337643337316664663864323039623439613938313031 type=BPF msg=audit(1744636784.129:17999): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636784.129:18000): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636784.129:18001): prog-id=552 op=LOAD type=SYSCALL msg=audit(1744636784.129:18001): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c00011beb0 a2=90 a3=0 items=0 ppid=86957 pid=86974 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636784.129:18001): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3235363937396337643337316664663864323039623439613938313031 type=SERVICE_START msg=audit(1744636784.350:18002): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=setroubleshootd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1744636784.563:18003): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbus-:1.2-org.fedoraproject.SetroubleshootPrivileged@1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1744636788.413:18004): prog-id=553 op=LOAD type=BPF msg=audit(1744636788.414:18005): prog-id=554 op=LOAD type=SYSCALL msg=audit(1744636788.414:18005): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001bfad0 a2=90 a3=0 items=0 ppid=86957 pid=87045 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636788.414:18005): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3031656534323838396539616134323235353435366339386562653633 type=BPF msg=audit(1744636788.414:18006): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636788.414:18007): prog-id=555 op=LOAD type=SYSCALL msg=audit(1744636788.414:18007): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001bfc48 a2=90 a3=0 items=0 ppid=86957 pid=87045 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636788.414:18007): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3031656534323838396539616134323235353435366339386562653633 type=BPF msg=audit(1744636788.414:18008): prog-id=556 op=LOAD type=SYSCALL msg=audit(1744636788.414:18008): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001bf9d8 a2=90 a3=0 items=0 ppid=86957 pid=87045 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636788.414:18008): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3031656534323838396539616134323235353435366339386562653633 type=BPF msg=audit(1744636788.414:18009): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636788.414:18010): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636788.414:18011): prog-id=557 op=LOAD type=SYSCALL msg=audit(1744636788.414:18011): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001bfeb0 a2=90 a3=0 items=0 ppid=86957 pid=87045 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636788.414:18011): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3031656534323838396539616134323235353435366339386562653633 type=NETFILTER_CFG msg=audit(1744636789.544:18012): table=filter family=2 entries=55 op=xt_replace pid=87112 subj=system_u:system_r:spc_t:s0 comm="iptables-restor" type=SYSCALL msg=audit(1744636789.544:18012): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=56293e0a68c0 items=0 ppid=25833 pid=87112 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636789.544:18012): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 type=NETFILTER_CFG msg=audit(1744636789.544:18013): table=nat family=2 entries=43 op=xt_replace pid=87112 subj=system_u:system_r:spc_t:s0 comm="iptables-restor" type=SYSCALL msg=audit(1744636789.544:18013): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=56293e0aa890 items=0 ppid=25833 pid=87112 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636789.544:18013): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 type=CRYPTO_KEY_USER msg=audit(1744636794.774:18014): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26497 suid=1000 rport=34224 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636794.778:18015): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=26497 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636794.779:18016): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" type=CRED_DISP msg=audit(1744636794.779:18017): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636794.780:18018): pid=26489 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=26489 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=SERVICE_STOP msg=audit(1744636795.730:18019): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbus-:1.2-org.fedoraproject.SetroubleshootPrivileged@1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1744636795.865:18020): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=setroubleshootd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744636797.795:18021): pid=86476 uid=0 auid=1000 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=86479 suid=1000 rport=48932 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636797.796:18022): pid=86476 uid=0 auid=1000 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=86479 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636797.799:18023): pid=86476 uid=0 auid=1000 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" type=CRED_DISP msg=audit(1744636797.799:18024): pid=86476 uid=0 auid=1000 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_END msg=audit(1744636797.800:18025): pid=86476 uid=0 auid=1000 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636797.800:18026): pid=86476 uid=0 auid=1000 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636797.800:18027): pid=86476 uid=0 auid=1000 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=86476 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=CRYPTO_KEY_USER msg=audit(1744636797.901:18028): pid=87416 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=87416 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1744636797.905:18029): pid=87415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=87416 suid=74 rport=33076 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1744636797.905:18030): pid=87415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=87416 suid=74 rport=33076 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1744636797.983:18031): pid=87415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744636797.983:18032): pid=87415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:70:6d:53:7b:b9:b1:0c:0b:97:46:57:0a:90:24:61:0d:60:dd:24:ba:9a:35:b7:5d:bd:60:94:bc:89:4a:f4:2f exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1744636798.017:18033): pid=87415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744636798.018:18034): pid=87415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=87416 suid=74 rport=33076 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1744636798.020:18035): pid=87415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1744636798.020:18036): pid=87415 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=34 res=1UID="root" OLD-AUID="unset" AUID="rocky" type=SYSCALL msg=audit(1744636798.020:18036): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7fffe6cedd10 a2=4 a3=3e8 items=0 ppid=12346 pid=87415 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=34 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636798.020:18036): proctitle=737368643A20726F636B79205B707269765D type=USER_ROLE_CHANGE msg=audit(1744636798.021:18037): pid=87415 uid=0 auid=1000 ses=34 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_START msg=audit(1744636798.038:18038): pid=87415 uid=0 auid=1000 ses=34 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636798.039:18039): pid=87418 uid=0 auid=1000 ses=34 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=87418 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=CRED_ACQ msg=audit(1744636798.040:18040): pid=87418 uid=0 auid=1000 ses=34 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_LOGIN msg=audit(1744636798.081:18041): pid=87415 uid=0 auid=1000 ses=34 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636798.081:18042): pid=87415 uid=0 auid=1000 ses=34 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636798.082:18043): pid=87415 uid=0 auid=1000 ses=34 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=87419 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636798.100:18044): pid=87415 uid=0 auid=1000 ses=34 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=87418 suid=1000 rport=33076 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636798.101:18045): pid=87415 uid=0 auid=1000 ses=34 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=87418 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636798.103:18046): pid=87415 uid=0 auid=1000 ses=34 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" type=CRED_DISP msg=audit(1744636798.103:18047): pid=87415 uid=0 auid=1000 ses=34 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_END msg=audit(1744636798.104:18048): pid=87415 uid=0 auid=1000 ses=34 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636798.104:18049): pid=87415 uid=0 auid=1000 ses=34 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636798.104:18050): pid=87415 uid=0 auid=1000 ses=34 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=87415 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=CRYPTO_KEY_USER msg=audit(1744636798.121:18051): pid=87438 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=87438 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1744636798.121:18052): pid=87437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=87438 suid=74 rport=33092 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1744636798.122:18053): pid=87437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=87438 suid=74 rport=33092 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1744636798.210:18054): pid=87437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744636798.210:18055): pid=87437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:70:6d:53:7b:b9:b1:0c:0b:97:46:57:0a:90:24:61:0d:60:dd:24:ba:9a:35:b7:5d:bd:60:94:bc:89:4a:f4:2f exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1744636798.255:18056): pid=87437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744636798.255:18057): pid=87437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=87438 suid=74 rport=33092 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1744636798.258:18058): pid=87437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1744636798.258:18059): pid=87437 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=35 res=1UID="root" OLD-AUID="unset" AUID="rocky" type=SYSCALL msg=audit(1744636798.258:18059): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffc054a9510 a2=4 a3=3e8 items=0 ppid=12346 pid=87437 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=35 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636798.258:18059): proctitle=737368643A20726F636B79205B707269765D type=USER_ROLE_CHANGE msg=audit(1744636798.264:18060): pid=87437 uid=0 auid=1000 ses=35 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_START msg=audit(1744636798.285:18061): pid=87437 uid=0 auid=1000 ses=35 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636798.286:18062): pid=87440 uid=0 auid=1000 ses=35 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=87440 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=CRED_ACQ msg=audit(1744636798.287:18063): pid=87440 uid=0 auid=1000 ses=35 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_LOGIN msg=audit(1744636798.329:18064): pid=87437 uid=0 auid=1000 ses=35 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636798.329:18065): pid=87437 uid=0 auid=1000 ses=35 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636798.330:18066): pid=87437 uid=0 auid=1000 ses=35 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=87441 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636798.383:18067): pid=87441 uid=1000 auid=1000 ses=35 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636798.383:18068): pid=87441 uid=1000 auid=1000 ses=35 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=636F6E747261696C2D737461747573202D74203135 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636798.384:18069): pid=87441 uid=1000 auid=1000 ses=35 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636798.387:18070): pid=87441 uid=1000 auid=1000 ses=35 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=BPF msg=audit(1744636806.379:18071): prog-id=558 op=LOAD type=SYSCALL msg=audit(1744636806.379:18071): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00023fc48 a2=90 a3=0 items=0 ppid=87530 pid=87540 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636806.379:18071): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35396466313630336338313533643738343535376134383530 type=BPF msg=audit(1744636806.379:18072): prog-id=559 op=LOAD type=SYSCALL msg=audit(1744636806.379:18072): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c00023f9d8 a2=90 a3=0 items=0 ppid=87530 pid=87540 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636806.379:18072): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35396466313630336338313533643738343535376134383530 type=BPF msg=audit(1744636806.379:18073): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636806.379:18074): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636806.379:18075): prog-id=560 op=LOAD type=SYSCALL msg=audit(1744636806.379:18075): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00023feb0 a2=90 a3=0 items=0 ppid=87530 pid=87540 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636806.379:18075): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35396466313630336338313533643738343535376134383530 type=BPF msg=audit(1744636808.294:18076): prog-id=0 op=UNLOAD type=USER_END msg=audit(1744636808.401:18077): pid=87441 uid=1000 auid=1000 ses=35 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636808.401:18078): pid=87441 uid=1000 auid=1000 ses=35 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636808.404:18079): pid=87437 uid=0 auid=1000 ses=35 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=87440 suid=1000 rport=33092 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636808.405:18080): pid=87437 uid=0 auid=1000 ses=35 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=87440 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636808.407:18081): pid=87437 uid=0 auid=1000 ses=35 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" type=CRED_DISP msg=audit(1744636808.408:18082): pid=87437 uid=0 auid=1000 ses=35 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_END msg=audit(1744636808.408:18083): pid=87437 uid=0 auid=1000 ses=35 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636808.408:18084): pid=87437 uid=0 auid=1000 ses=35 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636808.409:18085): pid=87437 uid=0 auid=1000 ses=35 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=87437 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=CRYPTO_KEY_USER msg=audit(1744636808.438:18086): pid=87609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=87609 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1744636808.440:18087): pid=87608 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=87609 suid=74 rport=55854 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1744636808.440:18088): pid=87608 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=87609 suid=74 rport=55854 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1744636808.519:18089): pid=87608 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744636808.519:18090): pid=87608 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:70:6d:53:7b:b9:b1:0c:0b:97:46:57:0a:90:24:61:0d:60:dd:24:ba:9a:35:b7:5d:bd:60:94:bc:89:4a:f4:2f exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1744636808.554:18091): pid=87608 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744636808.556:18092): pid=87608 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=87609 suid=74 rport=55854 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1744636808.558:18093): pid=87608 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1744636808.558:18094): pid=87608 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=36 res=1UID="root" OLD-AUID="unset" AUID="rocky" type=SYSCALL msg=audit(1744636808.558:18094): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffe10667b10 a2=4 a3=3e8 items=0 ppid=12346 pid=87608 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=36 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636808.558:18094): proctitle=737368643A20726F636B79205B707269765D type=USER_ROLE_CHANGE msg=audit(1744636808.559:18095): pid=87608 uid=0 auid=1000 ses=36 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_START msg=audit(1744636808.581:18096): pid=87608 uid=0 auid=1000 ses=36 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636808.582:18097): pid=87611 uid=0 auid=1000 ses=36 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=87611 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=CRED_ACQ msg=audit(1744636808.583:18098): pid=87611 uid=0 auid=1000 ses=36 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_LOGIN msg=audit(1744636808.625:18099): pid=87608 uid=0 auid=1000 ses=36 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636808.625:18100): pid=87608 uid=0 auid=1000 ses=36 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636808.626:18101): pid=87608 uid=0 auid=1000 ses=36 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=87612 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636808.657:18102): pid=87608 uid=0 auid=1000 ses=36 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=87611 suid=1000 rport=55854 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636808.658:18103): pid=87608 uid=0 auid=1000 ses=36 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=87611 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636808.660:18104): pid=87608 uid=0 auid=1000 ses=36 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" type=CRED_DISP msg=audit(1744636808.660:18105): pid=87608 uid=0 auid=1000 ses=36 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_END msg=audit(1744636808.662:18106): pid=87608 uid=0 auid=1000 ses=36 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636808.662:18107): pid=87608 uid=0 auid=1000 ses=36 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636808.662:18108): pid=87608 uid=0 auid=1000 ses=36 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=87608 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=CRYPTO_KEY_USER msg=audit(1744636808.686:18109): pid=87628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=87628 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1744636808.687:18110): pid=87627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=87628 suid=74 rport=55860 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1744636808.687:18111): pid=87627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=87628 suid=74 rport=55860 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1744636808.770:18112): pid=87627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744636808.770:18113): pid=87627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:70:6d:53:7b:b9:b1:0c:0b:97:46:57:0a:90:24:61:0d:60:dd:24:ba:9a:35:b7:5d:bd:60:94:bc:89:4a:f4:2f exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1744636808.804:18114): pid=87627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744636808.805:18115): pid=87627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=87628 suid=74 rport=55860 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1744636808.806:18116): pid=87627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1744636808.806:18117): pid=87627 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=37 res=1UID="root" OLD-AUID="unset" AUID="rocky" type=SYSCALL msg=audit(1744636808.806:18117): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7fffb0e842d0 a2=4 a3=3e8 items=0 ppid=12346 pid=87627 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=37 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636808.806:18117): proctitle=737368643A20726F636B79205B707269765D type=USER_ROLE_CHANGE msg=audit(1744636808.807:18118): pid=87627 uid=0 auid=1000 ses=37 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_START msg=audit(1744636808.822:18119): pid=87627 uid=0 auid=1000 ses=37 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636808.823:18120): pid=87630 uid=0 auid=1000 ses=37 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=87630 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=CRED_ACQ msg=audit(1744636808.824:18121): pid=87630 uid=0 auid=1000 ses=37 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_LOGIN msg=audit(1744636808.866:18122): pid=87627 uid=0 auid=1000 ses=37 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636808.866:18123): pid=87627 uid=0 auid=1000 ses=37 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636808.867:18124): pid=87627 uid=0 auid=1000 ses=37 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=87631 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636808.926:18125): pid=87631 uid=1000 auid=1000 ses=37 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636808.927:18126): pid=87631 uid=1000 auid=1000 ses=37 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=636F6E747261696C2D737461747573202D74203135 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636808.927:18127): pid=87631 uid=1000 auid=1000 ses=37 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636808.931:18128): pid=87631 uid=1000 auid=1000 ses=37 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=BPF msg=audit(1744636809.252:18129): prog-id=561 op=LOAD type=SYSCALL msg=audit(1744636809.252:18129): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001a1c48 a2=90 a3=0 items=0 ppid=87674 pid=87685 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636809.252:18129): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36653230653163633432303432363838356162336535636661 type=BPF msg=audit(1744636809.252:18130): prog-id=562 op=LOAD type=SYSCALL msg=audit(1744636809.252:18130): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c0001a19d8 a2=90 a3=0 items=0 ppid=87674 pid=87685 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636809.252:18130): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36653230653163633432303432363838356162336535636661 type=BPF msg=audit(1744636809.252:18131): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636809.252:18132): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636809.252:18133): prog-id=563 op=LOAD type=SYSCALL msg=audit(1744636809.252:18133): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001a1eb0 a2=90 a3=0 items=0 ppid=87674 pid=87685 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636809.252:18133): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36653230653163633432303432363838356162336535636661 type=BPF msg=audit(1744636811.350:18134): prog-id=0 op=UNLOAD type=USER_END msg=audit(1744636811.464:18135): pid=87631 uid=1000 auid=1000 ses=37 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636811.464:18136): pid=87631 uid=1000 auid=1000 ses=37 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636811.466:18137): pid=87627 uid=0 auid=1000 ses=37 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=87630 suid=1000 rport=55860 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636811.467:18138): pid=87627 uid=0 auid=1000 ses=37 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=87630 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636811.475:18139): pid=87627 uid=0 auid=1000 ses=37 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" type=CRED_DISP msg=audit(1744636811.476:18140): pid=87627 uid=0 auid=1000 ses=37 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_END msg=audit(1744636811.477:18141): pid=87627 uid=0 auid=1000 ses=37 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636811.477:18142): pid=87627 uid=0 auid=1000 ses=37 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636811.477:18143): pid=87627 uid=0 auid=1000 ses=37 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=87627 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=CRYPTO_KEY_USER msg=audit(1744636811.573:18144): pid=87844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=87844 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1744636811.574:18145): pid=87843 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=87844 suid=74 rport=55870 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1744636811.574:18146): pid=87843 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=87844 suid=74 rport=55870 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1744636811.656:18147): pid=87843 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744636811.656:18148): pid=87843 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:70:6d:53:7b:b9:b1:0c:0b:97:46:57:0a:90:24:61:0d:60:dd:24:ba:9a:35:b7:5d:bd:60:94:bc:89:4a:f4:2f exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1744636811.697:18149): pid=87843 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744636811.701:18150): pid=87843 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=87844 suid=74 rport=55870 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1744636811.703:18151): pid=87843 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1744636811.703:18152): pid=87843 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=38 res=1UID="root" OLD-AUID="unset" AUID="rocky" type=SYSCALL msg=audit(1744636811.703:18152): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7fffb422c0f0 a2=4 a3=3e8 items=0 ppid=12346 pid=87843 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=38 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636811.703:18152): proctitle=737368643A20726F636B79205B707269765D type=USER_ROLE_CHANGE msg=audit(1744636811.704:18153): pid=87843 uid=0 auid=1000 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_START msg=audit(1744636811.723:18154): pid=87843 uid=0 auid=1000 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636811.725:18155): pid=87846 uid=0 auid=1000 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=87846 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=CRED_ACQ msg=audit(1744636811.726:18156): pid=87846 uid=0 auid=1000 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_LOGIN msg=audit(1744636811.768:18157): pid=87843 uid=0 auid=1000 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636811.768:18158): pid=87843 uid=0 auid=1000 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636811.770:18159): pid=87843 uid=0 auid=1000 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=87847 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636811.841:18160): pid=87861 uid=1000 auid=1000 ses=38 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636811.842:18161): pid=87861 uid=1000 auid=1000 ses=38 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=74657374202D66202F726F6F742F2E6B7562652F636F6E666967 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636811.844:18162): pid=87861 uid=1000 auid=1000 ses=38 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636811.849:18163): pid=87861 uid=1000 auid=1000 ses=38 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636811.854:18164): pid=87861 uid=1000 auid=1000 ses=38 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636811.854:18165): pid=87861 uid=1000 auid=1000 ses=38 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_ACCT msg=audit(1744636811.894:18166): pid=87847 uid=1000 auid=1000 ses=38 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636811.895:18167): pid=87847 uid=1000 auid=1000 ses=38 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=636174202F726F6F742F2E6B7562652F636F6E666967 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636811.895:18168): pid=87847 uid=1000 auid=1000 ses=38 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636811.897:18169): pid=87847 uid=1000 auid=1000 ses=38 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636811.900:18170): pid=87847 uid=1000 auid=1000 ses=38 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636811.900:18171): pid=87847 uid=1000 auid=1000 ses=38 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636811.903:18172): pid=87843 uid=0 auid=1000 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=87846 suid=1000 rport=55870 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636811.903:18173): pid=87843 uid=0 auid=1000 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=87846 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636811.905:18174): pid=87843 uid=0 auid=1000 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" type=CRED_DISP msg=audit(1744636811.905:18175): pid=87843 uid=0 auid=1000 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_END msg=audit(1744636811.906:18176): pid=87843 uid=0 auid=1000 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636811.906:18177): pid=87843 uid=0 auid=1000 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636811.906:18178): pid=87843 uid=0 auid=1000 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=87843 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=USER_ACCT msg=audit(1744636811.946:18179): pid=87871 uid=1000 auid=1000 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636811.946:18180): pid=87871 uid=1000 auid=1000 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=63686F776E202D5220313030303A31303030202F686F6D652F726F636B792F2E6B756265 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636811.947:18181): pid=87871 uid=1000 auid=1000 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636811.948:18182): pid=87871 uid=1000 auid=1000 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636811.953:18183): pid=87871 uid=1000 auid=1000 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636811.953:18184): pid=87871 uid=1000 auid=1000 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636811.962:18185): pid=26137 uid=0 auid=1000 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636811.962:18186): pid=26137 uid=0 auid=1000 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636811.963:18187): pid=26137 uid=0 auid=1000 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26141 suid=1000 rport=43572 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636811.963:18188): pid=26137 uid=0 auid=1000 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=26141 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636811.965:18189): pid=26137 uid=0 auid=1000 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=CRED_DISP msg=audit(1744636811.965:18190): pid=26137 uid=0 auid=1000 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636811.966:18191): pid=26137 uid=0 auid=1000 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=26137 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=AVC msg=audit(1744636815.497:18192): avc: denied { read } for pid=87896 comm="systemd-sysctl" name="60-tf-node-init.conf" dev="vda5" ino=10096909 scontext=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 type=AVC msg=audit(1744636815.497:18192): avc: denied { open } for pid=87896 comm="systemd-sysctl" path="/etc/sysctl.d/60-tf-node-init.conf" dev="vda5" ino=10096909 scontext=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 type=SYSCALL msg=audit(1744636815.497:18192): arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=562f7707ccf0 a2=80000 a3=0 items=0 ppid=87893 pid=87896 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-sysctl" exe="/usr/lib/systemd/systemd-sysctl" subj=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=openat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636815.497:18192): proctitle=2F7573722F6C69622F73797374656D642F73797374656D642D73797363746C002D2D7072656669783D6E65742F697076342F636F6E662F746D70657468302D35393235613700002D2D7072656669783D6E65742F697076342F6E656967682F746D70657468302D35393235613700002D2D7072656669783D6E65742F69707636 type=AVC msg=audit(1744636815.498:18193): avc: denied { getattr } for pid=87896 comm="systemd-sysctl" path="/etc/sysctl.d/60-tf-node-init.conf" dev="vda5" ino=10096909 scontext=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 type=SYSCALL msg=audit(1744636815.498:18193): arch=c000003e syscall=262 success=yes exit=0 a0=3 a1=7ff4425b7f35 a2=7ffc68b9ed40 a3=1000 items=0 ppid=87893 pid=87896 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-sysctl" exe="/usr/lib/systemd/systemd-sysctl" subj=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636815.498:18193): proctitle=2F7573722F6C69622F73797374656D642F73797374656D642D73797363746C002D2D7072656669783D6E65742F697076342F636F6E662F746D70657468302D35393235613700002D2D7072656669783D6E65742F697076342F6E656967682F746D70657468302D35393235613700002D2D7072656669783D6E65742F69707636 type=AVC msg=audit(1744636815.498:18194): avc: denied { ioctl } for pid=87896 comm="systemd-sysctl" path="/etc/sysctl.d/60-tf-node-init.conf" dev="vda5" ino=10096909 ioctlcmd=0x5401 scontext=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 type=SYSCALL msg=audit(1744636815.498:18194): arch=c000003e syscall=16 success=no exit=-25 a0=3 a1=5401 a2=7ffc68b9ee40 a3=562f77076040 items=0 ppid=87893 pid=87896 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-sysctl" exe="/usr/lib/systemd/systemd-sysctl" subj=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=ioctl AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636815.498:18194): proctitle=2F7573722F6C69622F73797374656D642F73797374656D642D73797363746C002D2D7072656669783D6E65742F697076342F636F6E662F746D70657468302D35393235613700002D2D7072656669783D6E65742F697076342F6E656967682F746D70657468302D35393235613700002D2D7072656669783D6E65742F69707636 type=BPF msg=audit(1744636815.621:18195): prog-id=564 op=LOAD type=BPF msg=audit(1744636815.622:18196): prog-id=565 op=LOAD type=SYSCALL msg=audit(1744636815.622:18196): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000237ad0 a2=90 a3=0 items=0 ppid=87913 pid=87926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636815.622:18196): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632306138653638396434656130386361636436396336383730613662 type=BPF msg=audit(1744636815.622:18197): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636815.622:18198): prog-id=566 op=LOAD type=SYSCALL msg=audit(1744636815.622:18198): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000237c48 a2=90 a3=0 items=0 ppid=87913 pid=87926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636815.622:18198): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632306138653638396434656130386361636436396336383730613662 type=BPF msg=audit(1744636815.623:18199): prog-id=567 op=LOAD type=SYSCALL msg=audit(1744636815.623:18199): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0002379d8 a2=90 a3=0 items=0 ppid=87913 pid=87926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636815.623:18199): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632306138653638396434656130386361636436396336383730613662 type=BPF msg=audit(1744636815.624:18200): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636815.624:18201): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636815.624:18202): prog-id=568 op=LOAD type=SYSCALL msg=audit(1744636815.624:18202): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000237eb0 a2=90 a3=0 items=0 ppid=87913 pid=87926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636815.624:18202): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632306138653638396434656130386361636436396336383730613662 type=BPF msg=audit(1744636815.769:18203): prog-id=569 op=LOAD type=BPF msg=audit(1744636815.770:18204): prog-id=570 op=LOAD type=SYSCALL msg=audit(1744636815.770:18204): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001bdad0 a2=90 a3=0 items=0 ppid=87913 pid=87961 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636815.770:18204): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6537616336323833653637356465383238353663656434656434643637 type=BPF msg=audit(1744636815.770:18205): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636815.770:18206): prog-id=571 op=LOAD type=SYSCALL msg=audit(1744636815.770:18206): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001bdc48 a2=90 a3=0 items=0 ppid=87913 pid=87961 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636815.770:18206): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6537616336323833653637356465383238353663656434656434643637 type=BPF msg=audit(1744636815.770:18207): prog-id=572 op=LOAD type=SYSCALL msg=audit(1744636815.770:18207): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001bd9d8 a2=90 a3=0 items=0 ppid=87913 pid=87961 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636815.770:18207): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6537616336323833653637356465383238353663656434656434643637 type=BPF msg=audit(1744636815.770:18208): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636815.770:18209): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636815.770:18210): prog-id=573 op=LOAD type=SYSCALL msg=audit(1744636815.770:18210): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001bdeb0 a2=90 a3=0 items=0 ppid=87913 pid=87961 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636815.770:18210): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6537616336323833653637356465383238353663656434656434643637 type=SERVICE_START msg=audit(1744636815.933:18211): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=setroubleshootd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1744636816.121:18212): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbus-:1.2-org.fedoraproject.SetroubleshootPrivileged@2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=NETFILTER_CFG msg=audit(1744636816.557:18213): table=filter family=2 entries=54 op=xt_replace pid=88026 subj=system_u:system_r:spc_t:s0 comm="iptables-restor" type=SYSCALL msg=audit(1744636816.557:18213): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55b7abb58570 items=0 ppid=25833 pid=88026 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636816.557:18213): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 type=NETFILTER_CFG msg=audit(1744636816.557:18214): table=nat family=2 entries=52 op=xt_replace pid=88026 subj=system_u:system_r:spc_t:s0 comm="iptables-restor" type=SYSCALL msg=audit(1744636816.557:18214): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55b7abb5cf00 items=0 ppid=25833 pid=88026 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636816.557:18214): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 type=AVC msg=audit(1744636817.409:18215): avc: denied { read } for pid=88031 comm="systemd-sysctl" name="60-tf-node-init.conf" dev="vda5" ino=10096909 scontext=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 type=AVC msg=audit(1744636817.409:18216): avc: denied { open } for pid=88030 comm="systemd-sysctl" path="/etc/sysctl.d/60-tf-node-init.conf" dev="vda5" ino=10096909 scontext=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 type=SYSCALL msg=audit(1744636817.409:18216): arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=555774db3cf0 a2=80000 a3=0 items=0 ppid=87899 pid=88030 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-sysctl" exe="/usr/lib/systemd/systemd-sysctl" subj=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=openat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636817.409:18216): proctitle=2F7573722F6C69622F73797374656D642F73797374656D642D73797363746C002D2D7072656669783D6E65742F697076342F636F6E662F746D70657468302D33336438613800002D2D7072656669783D6E65742F697076342F6E656967682F746D70657468302D33336438613800002D2D7072656669783D6E65742F69707636 type=AVC msg=audit(1744636817.409:18217): avc: denied { getattr } for pid=88030 comm="systemd-sysctl" path="/etc/sysctl.d/60-tf-node-init.conf" dev="vda5" ino=10096909 scontext=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 type=SYSCALL msg=audit(1744636817.409:18217): arch=c000003e syscall=262 success=yes exit=0 a0=3 a1=7f43b87b7f35 a2=7fff00568bd0 a3=1000 items=0 ppid=87899 pid=88030 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-sysctl" exe="/usr/lib/systemd/systemd-sysctl" subj=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636817.409:18217): proctitle=2F7573722F6C69622F73797374656D642F73797374656D642D73797363746C002D2D7072656669783D6E65742F697076342F636F6E662F746D70657468302D33336438613800002D2D7072656669783D6E65742F697076342F6E656967682F746D70657468302D33336438613800002D2D7072656669783D6E65742F69707636 type=AVC msg=audit(1744636817.409:18218): avc: denied { ioctl } for pid=88030 comm="systemd-sysctl" path="/etc/sysctl.d/60-tf-node-init.conf" dev="vda5" ino=10096909 ioctlcmd=0x5401 scontext=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 type=SYSCALL msg=audit(1744636817.409:18218): arch=c000003e syscall=16 success=no exit=-25 a0=3 a1=5401 a2=7fff00568cd0 a3=555774dad040 items=0 ppid=87899 pid=88030 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-sysctl" exe="/usr/lib/systemd/systemd-sysctl" subj=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=ioctl AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636817.409:18218): proctitle=2F7573722F6C69622F73797374656D642F73797374656D642D73797363746C002D2D7072656669783D6E65742F697076342F636F6E662F746D70657468302D33336438613800002D2D7072656669783D6E65742F697076342F6E656967682F746D70657468302D33336438613800002D2D7072656669783D6E65742F69707636 type=SYSCALL msg=audit(1744636817.409:18215): arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=561914095cf0 a2=80000 a3=0 items=0 ppid=87903 pid=88031 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-sysctl" exe="/usr/lib/systemd/systemd-sysctl" subj=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=openat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636817.409:18215): proctitle=2F7573722F6C69622F73797374656D642F73797374656D642D73797363746C002D2D7072656669783D6E65742F697076342F636F6E662F746170657468302D33336438613800002D2D7072656669783D6E65742F697076342F6E656967682F746170657468302D33336438613800002D2D7072656669783D6E65742F69707636 type=SERVICE_STOP msg=audit(1744636822.134:18219): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1744636822.154:18220): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1744636822.504:18221): prog-id=574 op=LOAD type=BPF msg=audit(1744636822.505:18222): prog-id=575 op=LOAD type=SYSCALL msg=audit(1744636822.505:18222): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001bfad0 a2=90 a3=0 items=0 ppid=88052 pid=88064 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636822.505:18222): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3364336564373531303335353131626164353734613335663539333763 type=BPF msg=audit(1744636822.506:18223): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636822.506:18224): prog-id=576 op=LOAD type=SYSCALL msg=audit(1744636822.506:18224): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001bfc48 a2=90 a3=0 items=0 ppid=88052 pid=88064 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636822.506:18224): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3364336564373531303335353131626164353734613335663539333763 type=BPF msg=audit(1744636822.506:18225): prog-id=577 op=LOAD type=SYSCALL msg=audit(1744636822.506:18225): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001bf9d8 a2=90 a3=0 items=0 ppid=88052 pid=88064 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636822.506:18225): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3364336564373531303335353131626164353734613335663539333763 type=BPF msg=audit(1744636822.506:18226): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636822.506:18227): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636822.506:18228): prog-id=578 op=LOAD type=SYSCALL msg=audit(1744636822.506:18228): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001bfeb0 a2=90 a3=0 items=0 ppid=88052 pid=88064 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636822.506:18228): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3364336564373531303335353131626164353734613335663539333763 type=SERVICE_STOP msg=audit(1744636827.573:18229): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbus-:1.2-org.fedoraproject.SetroubleshootPrivileged@2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1744636827.613:18230): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=setroubleshootd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1744636829.341:18231): prog-id=579 op=LOAD type=BPF msg=audit(1744636829.341:18232): prog-id=580 op=LOAD type=SYSCALL msg=audit(1744636829.341:18232): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000195ad0 a2=90 a3=0 items=0 ppid=88052 pid=88109 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636829.341:18232): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6535333330653263366437386166616134613263306336353065343061 type=BPF msg=audit(1744636829.342:18233): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636829.342:18234): prog-id=581 op=LOAD type=SYSCALL msg=audit(1744636829.342:18234): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000195c48 a2=90 a3=0 items=0 ppid=88052 pid=88109 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636829.342:18234): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6535333330653263366437386166616134613263306336353065343061 type=BPF msg=audit(1744636829.342:18235): prog-id=582 op=LOAD type=SYSCALL msg=audit(1744636829.342:18235): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001959d8 a2=90 a3=0 items=0 ppid=88052 pid=88109 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636829.342:18235): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6535333330653263366437386166616134613263306336353065343061 type=BPF msg=audit(1744636829.342:18236): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636829.342:18237): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636829.342:18238): prog-id=583 op=LOAD type=SYSCALL msg=audit(1744636829.342:18238): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000195eb0 a2=90 a3=0 items=0 ppid=88052 pid=88109 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636829.342:18238): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6535333330653263366437386166616134613263306336353065343061 type=NETFILTER_CFG msg=audit(1744636829.618:18239): table=filter family=2 entries=54 op=xt_replace pid=88162 subj=system_u:system_r:spc_t:s0 comm="iptables-restor" type=SYSCALL msg=audit(1744636829.618:18239): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55d323032270 items=0 ppid=25833 pid=88162 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636829.618:18239): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 type=NETFILTER_CFG msg=audit(1744636829.620:18240): table=nat family=2 entries=52 op=xt_replace pid=88162 subj=system_u:system_r:spc_t:s0 comm="iptables-restor" type=SYSCALL msg=audit(1744636829.620:18240): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55d323037630 items=0 ppid=25833 pid=88162 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636829.620:18240): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 type=CRYPTO_KEY_USER msg=audit(1744636838.046:18241): pid=88349 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=88349 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1744636838.047:18242): pid=88348 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=88349 suid=74 rport=46704 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1744636838.048:18243): pid=88348 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=88349 suid=74 rport=46704 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1744636838.114:18244): pid=88348 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744636838.114:18245): pid=88348 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1744636838.152:18246): pid=88348 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744636838.154:18247): pid=88348 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=88349 suid=74 rport=46704 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1744636838.161:18248): pid=88348 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1744636838.161:18249): pid=88348 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=39 res=1UID="root" OLD-AUID="unset" AUID="rocky" type=SYSCALL msg=audit(1744636838.161:18249): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffebb098d00 a2=4 a3=3e8 items=0 ppid=12346 pid=88348 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=39 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636838.161:18249): proctitle=737368643A20726F636B79205B707269765D type=USER_ROLE_CHANGE msg=audit(1744636838.164:18250): pid=88348 uid=0 auid=1000 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=SERVICE_START msg=audit(1744636838.196:18251): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1744636838.235:18252): pid=88352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRED_ACQ msg=audit(1744636838.235:18253): pid=88352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="rocky" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=USER_ROLE_CHANGE msg=audit(1744636838.235:18254): pid=88352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1744636838.236:18255): pid=88352 uid=0 subj=system_u:system_r:init_t:s0 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=40 res=1UID="root" OLD-AUID="unset" AUID="rocky" type=SYSCALL msg=audit(1744636838.236:18255): arch=c000003e syscall=1 success=yes exit=4 a0=7 a1=7ffe2f7afdf0 a2=4 a3=3e8 items=0 ppid=1 pid=88352 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=40 comm="(systemd)" exe="/usr/lib/systemd/systemd" subj=system_u:system_r:init_t:s0 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636838.236:18255): proctitle="(systemd)" type=USER_START msg=audit(1744636838.237:18256): pid=88352 uid=0 auid=1000 ses=40 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="rocky" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" type=SERVICE_START msg=audit(1744636838.409:18257): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1744636838.423:18258): pid=88348 uid=0 auid=1000 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636838.424:18259): pid=88361 uid=0 auid=1000 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=88361 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=CRED_ACQ msg=audit(1744636838.425:18260): pid=88361 uid=0 auid=1000 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_LOGIN msg=audit(1744636838.471:18261): pid=88348 uid=0 auid=1000 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636838.471:18262): pid=88348 uid=0 auid=1000 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636838.472:18263): pid=88348 uid=0 auid=1000 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=88362 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636839.003:18264): pid=88348 uid=0 auid=1000 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636839.003:18265): pid=88348 uid=0 auid=1000 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636839.003:18266): pid=88348 uid=0 auid=1000 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=88361 suid=1000 rport=46704 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636839.005:18267): pid=88348 uid=0 auid=1000 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=88361 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636839.006:18268): pid=88348 uid=0 auid=1000 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=CRED_DISP msg=audit(1744636839.006:18269): pid=88348 uid=0 auid=1000 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636839.007:18270): pid=88348 uid=0 auid=1000 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=88348 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=CRYPTO_KEY_USER msg=audit(1744636839.028:18271): pid=88377 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=88377 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1744636839.029:18272): pid=88376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=88377 suid=74 rport=46708 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1744636839.029:18273): pid=88376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=88377 suid=74 rport=46708 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1744636839.093:18274): pid=88376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744636839.093:18275): pid=88376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1744636839.133:18276): pid=88376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744636839.134:18277): pid=88376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=88377 suid=74 rport=46708 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1744636839.135:18278): pid=88376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1744636839.135:18279): pid=88376 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=41 res=1UID="root" OLD-AUID="unset" AUID="rocky" type=SYSCALL msg=audit(1744636839.135:18279): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffce2866e90 a2=4 a3=3e8 items=0 ppid=12346 pid=88376 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=41 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636839.135:18279): proctitle=737368643A20726F636B79205B707269765D type=USER_ROLE_CHANGE msg=audit(1744636839.136:18280): pid=88376 uid=0 auid=1000 ses=41 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_START msg=audit(1744636839.155:18281): pid=88376 uid=0 auid=1000 ses=41 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636839.156:18282): pid=88379 uid=0 auid=1000 ses=41 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=88379 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=CRED_ACQ msg=audit(1744636839.157:18283): pid=88379 uid=0 auid=1000 ses=41 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_LOGIN msg=audit(1744636839.203:18284): pid=88376 uid=0 auid=1000 ses=41 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636839.203:18285): pid=88376 uid=0 auid=1000 ses=41 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636839.204:18286): pid=88376 uid=0 auid=1000 ses=41 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=88380 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636839.321:18287): pid=88423 uid=1000 auid=1000 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636839.321:18288): pid=88423 uid=1000 auid=1000 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd="/home/rocky/src/opensdn-io/tf-dev-test/tf-sanity/../common/setup_docker.sh" exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636839.322:18289): pid=88423 uid=1000 auid=1000 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636839.326:18290): pid=88423 uid=1000 auid=1000 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636839.420:18291): pid=88423 uid=1000 auid=1000 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636839.421:18292): pid=88423 uid=1000 auid=1000 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_ACCT msg=audit(1744636839.880:18293): pid=88446 uid=1000 auid=1000 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636839.880:18294): pid=88446 uid=1000 auid=1000 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=707974686F6E33202D6D2070697020696E7374616C6C206A696E6A6132 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636839.881:18295): pid=88446 uid=1000 auid=1000 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636839.884:18296): pid=88446 uid=1000 auid=1000 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636840.552:18297): pid=88446 uid=1000 auid=1000 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636840.552:18298): pid=88446 uid=1000 auid=1000 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_ACCT msg=audit(1744636840.634:18299): pid=88476 uid=1000 auid=1000 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636840.634:18300): pid=88476 uid=1000 auid=1000 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=646F636B65722070756C6C206E657875732E677A312E6F70656E73646E2E696F3A353130312F6F70656E73646E2D746573742D746573743A6D61737465722D315F355F335F312D315F30 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636840.635:18301): pid=88476 uid=1000 auid=1000 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636840.637:18302): pid=88476 uid=1000 auid=1000 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=NETFILTER_CFG msg=audit(1744636841.061:18303): table=filter family=2 entries=53 op=xt_replace pid=88517 subj=system_u:system_r:spc_t:s0 comm="iptables-restor" type=SYSCALL msg=audit(1744636841.061:18303): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55f2bfe5b8b0 items=0 ppid=25833 pid=88517 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636841.061:18303): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 type=NETFILTER_CFG msg=audit(1744636841.064:18304): table=nat family=2 entries=61 op=xt_replace pid=88517 subj=system_u:system_r:spc_t:s0 comm="iptables-restor" type=SYSCALL msg=audit(1744636841.064:18304): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55f2bfe67980 items=0 ppid=25833 pid=88517 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636841.064:18304): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 type=NETFILTER_CFG msg=audit(1744636841.759:18305): table=filter family=2 entries=50 op=xt_replace pid=88547 subj=system_u:system_r:spc_t:s0 comm="iptables-restor" type=SYSCALL msg=audit(1744636841.759:18305): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55eadf999c60 items=0 ppid=25833 pid=88547 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636841.759:18305): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 type=NETFILTER_CFG msg=audit(1744636841.799:18306): table=nat family=2 entries=88 op=xt_replace pid=88547 subj=system_u:system_r:spc_t:s0 comm="iptables-restor" type=SYSCALL msg=audit(1744636841.799:18306): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55eadf9abad0 items=0 ppid=25833 pid=88547 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636841.799:18306): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 type=USER_END msg=audit(1744636856.682:18307): pid=88476 uid=1000 auid=1000 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636856.683:18308): pid=88476 uid=1000 auid=1000 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_ACCT msg=audit(1744636856.742:18309): pid=88856 uid=1000 auid=1000 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636856.743:18310): pid=88856 uid=1000 auid=1000 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=646F636B657220637265617465202D2D6E616D65203735716E766C6F5A6B4E206E657875732E677A312E6F70656E73646E2E696F3A353130312F6F70656E73646E2D746573742D746573743A6D61737465722D315F355F335F312D315F30 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636856.743:18311): pid=88856 uid=1000 auid=1000 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636856.747:18312): pid=88856 uid=1000 auid=1000 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636858.267:18313): pid=88856 uid=1000 auid=1000 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636858.268:18314): pid=88856 uid=1000 auid=1000 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_ACCT msg=audit(1744636858.308:18315): pid=88869 uid=1000 auid=1000 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636858.308:18316): pid=88869 uid=1000 auid=1000 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=646F636B6572206370203735716E766C6F5A6B4E3A2F636F6E747261696C2D746573742F7465737472756E6E65722E7368202E2F7465737472756E6E65722E7368 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636858.309:18317): pid=88869 uid=1000 auid=1000 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636858.310:18318): pid=88869 uid=1000 auid=1000 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636858.337:18319): pid=88869 uid=1000 auid=1000 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636858.337:18320): pid=88869 uid=1000 auid=1000 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_ACCT msg=audit(1744636858.375:18321): pid=88880 uid=1000 auid=1000 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636858.375:18322): pid=88880 uid=1000 auid=1000 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=646F636B657220726D203735716E766C6F5A6B4E exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636858.376:18323): pid=88880 uid=1000 auid=1000 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636858.378:18324): pid=88880 uid=1000 auid=1000 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636858.410:18325): pid=88880 uid=1000 auid=1000 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636858.410:18326): pid=88880 uid=1000 auid=1000 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636858.435:18327): pid=88892 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=88892 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1744636858.436:18328): pid=88891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=88892 suid=74 rport=44948 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1744636858.436:18329): pid=88891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=88892 suid=74 rport=44948 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1744636858.517:18330): pid=88891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744636858.517:18331): pid=88891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:70:6d:53:7b:b9:b1:0c:0b:97:46:57:0a:90:24:61:0d:60:dd:24:ba:9a:35:b7:5d:bd:60:94:bc:89:4a:f4:2f exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1744636858.557:18332): pid=88891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744636858.558:18333): pid=88891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=88892 suid=74 rport=44948 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1744636858.559:18334): pid=88891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1744636858.559:18335): pid=88891 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=42 res=1UID="root" OLD-AUID="unset" AUID="rocky" type=SYSCALL msg=audit(1744636858.559:18335): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffdb166f800 a2=4 a3=3e8 items=0 ppid=12346 pid=88891 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=42 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636858.559:18335): proctitle=737368643A20726F636B79205B707269765D type=USER_ROLE_CHANGE msg=audit(1744636858.560:18336): pid=88891 uid=0 auid=1000 ses=42 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_START msg=audit(1744636858.578:18337): pid=88891 uid=0 auid=1000 ses=42 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636858.579:18338): pid=88894 uid=0 auid=1000 ses=42 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=88894 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=CRED_ACQ msg=audit(1744636858.580:18339): pid=88894 uid=0 auid=1000 ses=42 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_LOGIN msg=audit(1744636858.621:18340): pid=88891 uid=0 auid=1000 ses=42 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636858.621:18341): pid=88891 uid=0 auid=1000 ses=42 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636858.622:18342): pid=88891 uid=0 auid=1000 ses=42 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=88895 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636858.676:18343): pid=88895 uid=1000 auid=1000 ses=42 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636858.677:18344): pid=88895 uid=1000 auid=1000 ses=42 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=62617368202D6378206C73202D6C61202F6574632F6B756265726E65746573203B206C73202D6C61202E6B756265 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636858.677:18345): pid=88895 uid=1000 auid=1000 ses=42 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636858.679:18346): pid=88895 uid=1000 auid=1000 ses=42 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636858.688:18347): pid=88895 uid=1000 auid=1000 ses=42 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636858.688:18348): pid=88895 uid=1000 auid=1000 ses=42 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636858.690:18349): pid=88891 uid=0 auid=1000 ses=42 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=88894 suid=1000 rport=44948 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636858.691:18350): pid=88891 uid=0 auid=1000 ses=42 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=88894 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636858.692:18351): pid=88891 uid=0 auid=1000 ses=42 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" type=CRED_DISP msg=audit(1744636858.692:18352): pid=88891 uid=0 auid=1000 ses=42 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_END msg=audit(1744636858.693:18353): pid=88891 uid=0 auid=1000 ses=42 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636858.693:18354): pid=88891 uid=0 auid=1000 ses=42 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636858.693:18355): pid=88891 uid=0 auid=1000 ses=42 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=88891 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=CRYPTO_KEY_USER msg=audit(1744636858.709:18356): pid=88913 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=88913 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1744636858.710:18357): pid=88912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=88913 suid=74 rport=44954 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1744636858.710:18358): pid=88912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=88913 suid=74 rport=44954 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1744636858.787:18359): pid=88912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744636858.787:18360): pid=88912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:70:6d:53:7b:b9:b1:0c:0b:97:46:57:0a:90:24:61:0d:60:dd:24:ba:9a:35:b7:5d:bd:60:94:bc:89:4a:f4:2f exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1744636858.822:18361): pid=88912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744636858.822:18362): pid=88912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=88913 suid=74 rport=44954 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1744636858.824:18363): pid=88912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1744636858.824:18364): pid=88912 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=43 res=1UID="root" OLD-AUID="unset" AUID="rocky" type=SYSCALL msg=audit(1744636858.824:18364): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffdd9aabd10 a2=4 a3=3e8 items=0 ppid=12346 pid=88912 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=43 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636858.824:18364): proctitle=737368643A20726F636B79205B707269765D type=USER_ROLE_CHANGE msg=audit(1744636858.825:18365): pid=88912 uid=0 auid=1000 ses=43 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_START msg=audit(1744636858.841:18366): pid=88912 uid=0 auid=1000 ses=43 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636858.843:18367): pid=88915 uid=0 auid=1000 ses=43 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=88915 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=CRED_ACQ msg=audit(1744636858.844:18368): pid=88915 uid=0 auid=1000 ses=43 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_LOGIN msg=audit(1744636858.886:18369): pid=88912 uid=0 auid=1000 ses=43 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636858.886:18370): pid=88912 uid=0 auid=1000 ses=43 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636858.887:18371): pid=88912 uid=0 auid=1000 ses=43 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=88916 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636858.938:18372): pid=88916 uid=1000 auid=1000 ses=43 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636858.938:18373): pid=88916 uid=1000 auid=1000 ses=43 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=62617368202D6378206370202D66202F6574632F6B756265726E657465732F61646D696E2E636F6E66202F746D702F6B7562655F636F6E6669672026262063686D6F6420363434202F746D702F6B7562655F636F6E666967 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636858.939:18374): pid=88916 uid=1000 auid=1000 ses=43 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636858.940:18375): pid=88916 uid=1000 auid=1000 ses=43 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636858.948:18376): pid=88916 uid=1000 auid=1000 ses=43 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636858.948:18377): pid=88916 uid=1000 auid=1000 ses=43 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636858.950:18378): pid=88912 uid=0 auid=1000 ses=43 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636858.950:18379): pid=88912 uid=0 auid=1000 ses=43 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636858.950:18380): pid=88912 uid=0 auid=1000 ses=43 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=88915 suid=1000 rport=44954 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636858.951:18381): pid=88912 uid=0 auid=1000 ses=43 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=88915 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636858.952:18382): pid=88912 uid=0 auid=1000 ses=43 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" type=CRED_DISP msg=audit(1744636858.952:18383): pid=88912 uid=0 auid=1000 ses=43 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636858.953:18384): pid=88912 uid=0 auid=1000 ses=43 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=88912 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=USER_ACCT msg=audit(1744636859.121:18385): pid=88937 uid=1000 auid=1000 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636859.121:18386): pid=88937 uid=1000 auid=1000 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=646F636B6572202D76 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636859.122:18387): pid=88937 uid=1000 auid=1000 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636859.124:18388): pid=88937 uid=1000 auid=1000 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636859.142:18389): pid=88937 uid=1000 auid=1000 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636859.142:18390): pid=88937 uid=1000 auid=1000 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_ACCT msg=audit(1744636859.189:18391): pid=88962 uid=1000 auid=1000 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636859.189:18392): pid=88962 uid=1000 auid=1000 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=646F636B657220696D61676573206E657875732E677A312E6F70656E73646E2E696F3A353130312F6F70656E73646E2D746573742D74657374 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636859.189:18393): pid=88962 uid=1000 auid=1000 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636859.191:18394): pid=88962 uid=1000 auid=1000 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636859.227:18395): pid=88962 uid=1000 auid=1000 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636859.227:18396): pid=88962 uid=1000 auid=1000 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_ACCT msg=audit(1744636859.271:18397): pid=89004 uid=1000 auid=1000 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636859.272:18398): pid=89004 uid=1000 auid=1000 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd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exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636859.272:18399): pid=89004 uid=1000 auid=1000 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636859.274:18400): pid=89004 uid=1000 auid=1000 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=BPF msg=audit(1744636859.444:18401): prog-id=584 op=LOAD type=SYSCALL msg=audit(1744636859.444:18401): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c0001c9c48 a2=90 a3=0 items=0 ppid=89027 pid=89039 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636859.444:18401): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63376162303531623031353033356435393766366530343634 type=BPF msg=audit(1744636859.444:18402): prog-id=585 op=LOAD type=SYSCALL msg=audit(1744636859.444:18402): arch=c000003e syscall=321 success=yes exit=22 a0=5 a1=c0001c99d8 a2=90 a3=0 items=0 ppid=89027 pid=89039 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636859.444:18402): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63376162303531623031353033356435393766366530343634 type=BPF msg=audit(1744636859.444:18403): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636859.444:18404): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636859.444:18405): prog-id=586 op=LOAD type=SYSCALL msg=audit(1744636859.444:18405): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c0001c9eb0 a2=90 a3=0 items=0 ppid=89027 pid=89039 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636859.444:18405): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63376162303531623031353033356435393766366530343634 type=CRYPTO_KEY_USER msg=audit(1744636872.397:18406): pid=89132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=89132 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1744636872.397:18407): pid=89129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=89132 suid=74 rport=54738 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1744636872.397:18408): pid=89129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=89132 suid=74 rport=54738 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1744636872.457:18409): pid=89129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744636872.457:18410): pid=89129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:70:6d:53:7b:b9:b1:0c:0b:97:46:57:0a:90:24:61:0d:60:dd:24:ba:9a:35:b7:5d:bd:60:94:bc:89:4a:f4:2f exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1744636872.485:18411): pid=89129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744636872.486:18412): pid=89129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=89132 suid=74 rport=54738 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1744636872.488:18413): pid=89129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1744636872.488:18414): pid=89129 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=44 res=1UID="root" OLD-AUID="unset" AUID="rocky" type=SYSCALL msg=audit(1744636872.488:18414): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffdb1adf4e0 a2=4 a3=3e8 items=0 ppid=12346 pid=89129 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=44 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636872.488:18414): proctitle=737368643A20726F636B79205B707269765D type=USER_ROLE_CHANGE msg=audit(1744636872.489:18415): pid=89129 uid=0 auid=1000 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_START msg=audit(1744636872.511:18416): pid=89129 uid=0 auid=1000 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636872.512:18417): pid=89134 uid=0 auid=1000 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=89134 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=CRED_ACQ msg=audit(1744636872.513:18418): pid=89134 uid=0 auid=1000 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_LOGIN msg=audit(1744636872.557:18419): pid=89129 uid=0 auid=1000 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636872.557:18420): pid=89129 uid=0 auid=1000 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636872.562:18421): pid=89129 uid=0 auid=1000 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=89135 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636872.625:18422): pid=89135 uid=1000 auid=1000 ses=44 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636872.625:18423): pid=89135 uid=1000 auid=1000 ses=44 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F62617368202D6C202D6320686F73746E616D65 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636872.626:18424): pid=89135 uid=1000 auid=1000 ses=44 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636872.628:18425): pid=89135 uid=1000 auid=1000 ses=44 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=BPF msg=audit(1744636872.650:18426): prog-id=587 op=LOAD type=BPF msg=audit(1744636872.650:18427): prog-id=588 op=LOAD type=SERVICE_START msg=audit(1744636872.893:18428): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1744636872.922:18429): pid=89135 uid=1000 auid=1000 ses=44 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636872.922:18430): pid=89135 uid=1000 auid=1000 ses=44 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636872.923:18431): pid=89129 uid=0 auid=1000 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636872.923:18432): pid=89129 uid=0 auid=1000 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636872.966:18433): pid=89129 uid=0 auid=1000 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636872.967:18434): pid=89129 uid=0 auid=1000 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636872.968:18435): pid=89129 uid=0 auid=1000 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=89174 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636873.024:18436): pid=89174 uid=1000 auid=1000 ses=44 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636873.024:18437): pid=89174 uid=1000 auid=1000 ses=44 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F62617368202D6C202D6320686F73746E616D65202D66 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636873.025:18438): pid=89174 uid=1000 auid=1000 ses=44 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636873.027:18439): pid=89174 uid=1000 auid=1000 ses=44 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636873.061:18440): pid=89174 uid=1000 auid=1000 ses=44 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636873.061:18441): pid=89174 uid=1000 auid=1000 ses=44 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636873.063:18442): pid=89129 uid=0 auid=1000 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636873.063:18443): pid=89129 uid=0 auid=1000 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636873.106:18444): pid=89129 uid=0 auid=1000 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636873.106:18445): pid=89129 uid=0 auid=1000 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636873.108:18446): pid=89129 uid=0 auid=1000 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=89212 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636873.166:18447): pid=89212 uid=1000 auid=1000 ses=44 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636873.166:18448): pid=89212 uid=1000 auid=1000 ses=44 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F62617368202D6C202D6320646F636B657220707320323E2F6465762F6E756C6C20207C2067726570202D7620222F70617573655C7C2F7573722F62696E2F706F645C7C6E6F76615F6170695F5C7C636F6E747261696C2E2A696E69745C7C696E69742E2A636F6E747261696C5C7C70726F766973696F6E65725C7C706C6163656D656E742220207C2061776B20277B7072696E7420244E467D27 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636873.166:18449): pid=89212 uid=1000 auid=1000 ses=44 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636873.168:18450): pid=89212 uid=1000 auid=1000 ses=44 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636873.262:18451): pid=89212 uid=1000 auid=1000 ses=44 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636873.262:18452): pid=89212 uid=1000 auid=1000 ses=44 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636873.264:18453): pid=89129 uid=0 auid=1000 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636873.264:18454): pid=89129 uid=0 auid=1000 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636873.307:18455): pid=89129 uid=0 auid=1000 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636873.307:18456): pid=89129 uid=0 auid=1000 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636873.309:18457): pid=89129 uid=0 auid=1000 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=89262 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636873.367:18458): pid=89262 uid=1000 auid=1000 ses=44 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636873.368:18459): pid=89262 uid=1000 auid=1000 ses=44 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F62617368202D6C202D6320697020616464722073686F77207C20677265702027696E6574202E2A2F2E2A206272642027207C2061776B20277B7072696E742024327D27 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636873.368:18460): pid=89262 uid=1000 auid=1000 ses=44 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636873.371:18461): pid=89262 uid=1000 auid=1000 ses=44 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636873.409:18462): pid=89262 uid=1000 auid=1000 ses=44 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636873.409:18463): pid=89262 uid=1000 auid=1000 ses=44 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636873.410:18464): pid=89129 uid=0 auid=1000 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636873.410:18465): pid=89129 uid=0 auid=1000 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636873.454:18466): pid=89129 uid=0 auid=1000 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636873.454:18467): pid=89129 uid=0 auid=1000 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636873.456:18468): pid=89129 uid=0 auid=1000 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=89307 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636873.520:18469): pid=89307 uid=1000 auid=1000 ses=44 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636873.521:18470): pid=89307 uid=1000 auid=1000 ses=44 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F62617368202D6C202D6320676574656E7420686F7374732031302E302E302E3338207C2068656164202D6E2031207C2061776B20277B7072696E742024327D27 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636873.521:18471): pid=89307 uid=1000 auid=1000 ses=44 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636873.523:18472): pid=89307 uid=1000 auid=1000 ses=44 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636873.567:18473): pid=89307 uid=1000 auid=1000 ses=44 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636873.567:18474): pid=89307 uid=1000 auid=1000 ses=44 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636873.569:18475): pid=89129 uid=0 auid=1000 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636873.569:18476): pid=89129 uid=0 auid=1000 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636873.614:18477): pid=89129 uid=0 auid=1000 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636873.614:18478): pid=89129 uid=0 auid=1000 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636873.616:18479): pid=89129 uid=0 auid=1000 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=89348 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636873.676:18480): pid=89348 uid=1000 auid=1000 ses=44 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636873.677:18481): pid=89348 uid=1000 auid=1000 ses=44 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F62617368202D6C202D6320697020616464722073686F77206465762076686F737430207C20677265702027696E6574202E2A2F2E2A206272642027207C2061776B20277B7072696E742024327D27 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636873.677:18482): pid=89348 uid=1000 auid=1000 ses=44 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636873.680:18483): pid=89348 uid=1000 auid=1000 ses=44 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636873.723:18484): pid=89348 uid=1000 auid=1000 ses=44 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636873.723:18485): pid=89348 uid=1000 auid=1000 ses=44 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636873.724:18486): pid=89129 uid=0 auid=1000 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636873.724:18487): pid=89129 uid=0 auid=1000 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636873.768:18488): pid=89129 uid=0 auid=1000 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636873.768:18489): pid=89129 uid=0 auid=1000 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636873.770:18490): pid=89129 uid=0 auid=1000 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=89389 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636873.827:18491): pid=89129 uid=0 auid=1000 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636873.827:18492): pid=89129 uid=0 auid=1000 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636873.870:18493): pid=89129 uid=0 auid=1000 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636873.870:18494): pid=89129 uid=0 auid=1000 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636873.872:18495): pid=89129 uid=0 auid=1000 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=89425 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636873.933:18496): pid=89129 uid=0 auid=1000 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636873.934:18497): pid=89129 uid=0 auid=1000 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636873.977:18498): pid=89129 uid=0 auid=1000 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636873.977:18499): pid=89129 uid=0 auid=1000 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636873.980:18500): pid=89129 uid=0 auid=1000 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=89463 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636874.009:18501): pid=89129 uid=0 auid=1000 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=89134 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636874.009:18502): pid=89129 uid=0 auid=1000 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=89134 suid=1000 rport=54738 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636874.012:18503): pid=89129 uid=0 auid=1000 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" type=CRED_DISP msg=audit(1744636874.012:18504): pid=89129 uid=0 auid=1000 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_END msg=audit(1744636874.013:18505): pid=89129 uid=0 auid=1000 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636874.013:18506): pid=89129 uid=0 auid=1000 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636874.013:18507): pid=89129 uid=0 auid=1000 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=89129 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=CRYPTO_KEY_USER msg=audit(1744636881.119:18508): pid=89510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=89510 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1744636881.120:18509): pid=89509 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=89510 suid=74 rport=47176 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1744636881.120:18510): pid=89509 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=89510 suid=74 rport=47176 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1744636881.177:18511): pid=89509 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744636881.177:18512): pid=89509 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:70:6d:53:7b:b9:b1:0c:0b:97:46:57:0a:90:24:61:0d:60:dd:24:ba:9a:35:b7:5d:bd:60:94:bc:89:4a:f4:2f exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1744636881.206:18513): pid=89509 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744636881.206:18514): pid=89509 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=89510 suid=74 rport=47176 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1744636881.208:18515): pid=89509 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1744636881.208:18516): pid=89509 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=45 res=1UID="root" OLD-AUID="unset" AUID="rocky" type=SYSCALL msg=audit(1744636881.208:18516): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffd0cef70f0 a2=4 a3=3e8 items=0 ppid=12346 pid=89509 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=45 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636881.208:18516): proctitle=737368643A20726F636B79205B707269765D type=USER_ROLE_CHANGE msg=audit(1744636881.209:18517): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_START msg=audit(1744636881.228:18518): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636881.229:18519): pid=89512 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=89512 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=CRED_ACQ msg=audit(1744636881.230:18520): pid=89512 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_LOGIN msg=audit(1744636881.273:18521): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636881.274:18522): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636881.275:18523): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=89513 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636881.340:18524): pid=89513 uid=1000 auid=1000 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636881.341:18525): pid=89513 uid=1000 auid=1000 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F62617368202D6C202D6320686F73746E616D65 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636881.342:18526): pid=89513 uid=1000 auid=1000 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636881.344:18527): pid=89513 uid=1000 auid=1000 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636881.379:18528): pid=89513 uid=1000 auid=1000 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636881.380:18529): pid=89513 uid=1000 auid=1000 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636881.381:18530): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636881.381:18531): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636881.424:18532): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636881.424:18533): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636881.426:18534): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=89548 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636881.480:18535): pid=89548 uid=1000 auid=1000 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636881.480:18536): pid=89548 uid=1000 auid=1000 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F62617368202D6C202D6320686F73746E616D65202D66 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636881.480:18537): pid=89548 uid=1000 auid=1000 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636881.482:18538): pid=89548 uid=1000 auid=1000 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636881.514:18539): pid=89548 uid=1000 auid=1000 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636881.514:18540): pid=89548 uid=1000 auid=1000 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636881.515:18541): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636881.516:18542): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636881.559:18543): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636881.559:18544): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636881.561:18545): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=89583 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636881.614:18546): pid=89583 uid=1000 auid=1000 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636881.614:18547): pid=89583 uid=1000 auid=1000 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F62617368202D6C202D6320646F636B657220707320323E2F6465762F6E756C6C20207C2067726570202D7620222F70617573655C7C2F7573722F62696E2F706F645C7C6E6F76615F6170695F5C7C636F6E747261696C2E2A696E69745C7C696E69742E2A636F6E747261696C5C7C70726F766973696F6E65725C7C706C6163656D656E742220207C2061776B20277B7072696E7420244E467D27 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636881.614:18548): pid=89583 uid=1000 auid=1000 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636881.616:18549): pid=89583 uid=1000 auid=1000 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636881.692:18550): pid=89583 uid=1000 auid=1000 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636881.693:18551): pid=89583 uid=1000 auid=1000 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636881.694:18552): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636881.694:18553): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636881.736:18554): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636881.736:18555): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636881.737:18556): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=89628 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636881.792:18557): pid=89628 uid=1000 auid=1000 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636881.792:18558): pid=89628 uid=1000 auid=1000 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F62617368202D6C202D6320697020616464722073686F77207C20677265702027696E6574202E2A2F2E2A206272642027207C2061776B20277B7072696E742024327D27 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636881.793:18559): pid=89628 uid=1000 auid=1000 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636881.794:18560): pid=89628 uid=1000 auid=1000 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636881.831:18561): pid=89628 uid=1000 auid=1000 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636881.831:18562): pid=89628 uid=1000 auid=1000 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636881.833:18563): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636881.833:18564): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636881.875:18565): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636881.875:18566): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636881.877:18567): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=89666 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636881.936:18568): pid=89666 uid=1000 auid=1000 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636881.936:18569): pid=89666 uid=1000 auid=1000 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F62617368202D6C202D6320676574656E7420686F7374732031302E302E302E3338207C2068656164202D6E2031207C2061776B20277B7072696E742024327D27 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636881.936:18570): pid=89666 uid=1000 auid=1000 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636881.938:18571): pid=89666 uid=1000 auid=1000 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636881.972:18572): pid=89666 uid=1000 auid=1000 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636881.973:18573): pid=89666 uid=1000 auid=1000 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636881.974:18574): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636881.974:18575): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636882.017:18576): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636882.017:18577): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636882.019:18578): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=89704 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636882.076:18579): pid=89704 uid=1000 auid=1000 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636882.076:18580): pid=89704 uid=1000 auid=1000 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F62617368202D6C202D6320697020616464722073686F77206465762076686F737430207C20677265702027696E6574202E2A2F2E2A206272642027207C2061776B20277B7072696E742024327D27 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636882.077:18581): pid=89704 uid=1000 auid=1000 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636882.078:18582): pid=89704 uid=1000 auid=1000 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636882.114:18583): pid=89704 uid=1000 auid=1000 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636882.114:18584): pid=89704 uid=1000 auid=1000 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636882.115:18585): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636882.115:18586): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636882.158:18587): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636882.158:18588): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636882.160:18589): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=89742 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636882.213:18590): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636882.213:18591): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636882.255:18592): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636882.255:18593): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636882.257:18594): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=89775 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636882.309:18595): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636882.309:18596): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636882.717:18597): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636882.717:18598): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636882.719:18599): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=89811 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636882.775:18600): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636882.775:18601): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636882.817:18602): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636882.817:18603): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636882.819:18604): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=89844 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636882.886:18605): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636882.886:18606): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636882.929:18607): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636882.929:18608): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636882.931:18609): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=89878 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636882.991:18610): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636882.991:18611): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636883.033:18612): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636883.033:18613): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636883.035:18614): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=89912 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636883.104:18615): pid=89912 uid=1000 auid=1000 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636883.104:18616): pid=89912 uid=1000 auid=1000 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F62617368202D6C202D6320646F636B6572206578656320202D2D70726976696C6567656420202D6974206B7562656D616E616765725F6B38735F6B7562656D616E616765725F31202F62696E2F62617368202D632020276772657020225E5B20095D2A636C75737465725F70726F6A65637422202F6574632F636F6E747261696C2F636F6E747261696C2D6B756265726E657465732E636F6E6627 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636883.104:18617): pid=89912 uid=1000 auid=1000 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636883.106:18618): pid=89912 uid=1000 auid=1000 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636883.243:18619): pid=89912 uid=1000 auid=1000 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636883.243:18620): pid=89912 uid=1000 auid=1000 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636883.245:18621): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636883.245:18622): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636883.319:18623): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636883.319:18624): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636883.321:18625): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=89976 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636883.381:18626): pid=89976 uid=1000 auid=1000 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636883.381:18627): pid=89976 uid=1000 auid=1000 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F62617368202D6C202D6320646F636B6572206578656320202D2D70726976696C6567656420202D6974206B7562656D616E616765725F6B38735F6B7562656D616E616765725F31202F62696E2F62617368202D632020276E657473746174202D616E7470207C2067726570203A38313038207C2067726570204C495354454E27 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636883.381:18628): pid=89976 uid=1000 auid=1000 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636883.383:18629): pid=89976 uid=1000 auid=1000 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636883.510:18630): pid=89976 uid=1000 auid=1000 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636883.510:18631): pid=89976 uid=1000 auid=1000 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636883.512:18632): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636883.512:18633): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=NETFILTER_CFG msg=audit(1744636883.604:18634): table=filter family=2 entries=50 op=xt_replace pid=90063 subj=system_u:system_r:spc_t:s0 comm="iptables-restor" type=SYSCALL msg=audit(1744636883.604:18634): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=5649348e8290 items=0 ppid=25833 pid=90063 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636883.604:18634): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 type=NETFILTER_CFG msg=audit(1744636883.609:18635): table=nat family=2 entries=103 op=xt_replace pid=90063 subj=system_u:system_r:spc_t:s0 comm="iptables-restor" type=SYSCALL msg=audit(1744636883.609:18635): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=5649348f95a0 items=0 ppid=25833 pid=90063 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636883.609:18635): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 type=NETFILTER_CFG msg=audit(1744636883.655:18636): table=filter family=2 entries=51 op=xt_replace pid=90085 subj=system_u:system_r:spc_t:s0 comm="iptables-restor" type=SYSCALL msg=audit(1744636883.655:18636): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=5594a46b9360 items=0 ppid=25833 pid=90085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636883.655:18636): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 type=NETFILTER_CFG msg=audit(1744636883.657:18637): table=nat family=2 entries=103 op=xt_replace pid=90085 subj=system_u:system_r:spc_t:s0 comm="iptables-restor" type=SYSCALL msg=audit(1744636883.657:18637): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=5594a46ca610 items=0 ppid=25833 pid=90085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636883.657:18637): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 type=AVC msg=audit(1744636899.035:18638): avc: denied { read } for pid=90318 comm="systemd-sysctl" name="60-tf-node-init.conf" dev="vda5" ino=10096909 scontext=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 type=AVC msg=audit(1744636899.035:18638): avc: denied { open } for pid=90318 comm="systemd-sysctl" path="/etc/sysctl.d/60-tf-node-init.conf" dev="vda5" ino=10096909 scontext=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 type=SYSCALL msg=audit(1744636899.035:18638): arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=5557581e1cf0 a2=80000 a3=0 items=0 ppid=90313 pid=90318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-sysctl" exe="/usr/lib/systemd/systemd-sysctl" subj=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=openat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636899.035:18638): proctitle=2F7573722F6C69622F73797374656D642F73797374656D642D73797363746C002D2D7072656669783D6E65742F697076342F636F6E662F746170657468302D66626239313800002D2D7072656669783D6E65742F697076342F6E656967682F746170657468302D66626239313800002D2D7072656669783D6E65742F69707636 type=AVC msg=audit(1744636899.036:18639): avc: denied { getattr } for pid=90318 comm="systemd-sysctl" path="/etc/sysctl.d/60-tf-node-init.conf" dev="vda5" ino=10096909 scontext=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 type=SYSCALL msg=audit(1744636899.036:18639): arch=c000003e syscall=262 success=yes exit=0 a0=3 a1=7fd51fbb7f35 a2=7ffd8ee0ba60 a3=1000 items=0 ppid=90313 pid=90318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-sysctl" exe="/usr/lib/systemd/systemd-sysctl" subj=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636899.036:18639): proctitle=2F7573722F6C69622F73797374656D642F73797374656D642D73797363746C002D2D7072656669783D6E65742F697076342F636F6E662F746170657468302D66626239313800002D2D7072656669783D6E65742F697076342F6E656967682F746170657468302D66626239313800002D2D7072656669783D6E65742F69707636 type=AVC msg=audit(1744636899.036:18640): avc: denied { ioctl } for pid=90318 comm="systemd-sysctl" path="/etc/sysctl.d/60-tf-node-init.conf" dev="vda5" ino=10096909 ioctlcmd=0x5401 scontext=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 type=SYSCALL msg=audit(1744636899.036:18640): arch=c000003e syscall=16 success=no exit=-25 a0=3 a1=5401 a2=7ffd8ee0bb60 a3=5557581db040 items=0 ppid=90313 pid=90318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-sysctl" exe="/usr/lib/systemd/systemd-sysctl" subj=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=ioctl AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636899.036:18640): proctitle=2F7573722F6C69622F73797374656D642F73797374656D642D73797363746C002D2D7072656669783D6E65742F697076342F636F6E662F746170657468302D66626239313800002D2D7072656669783D6E65742F697076342F6E656967682F746170657468302D66626239313800002D2D7072656669783D6E65742F69707636 type=SERVICE_START msg=audit(1744636899.422:18641): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=setroubleshootd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1744636899.619:18642): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbus-:1.2-org.fedoraproject.SetroubleshootPrivileged@3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1744636904.188:18643): prog-id=589 op=LOAD type=BPF msg=audit(1744636904.194:18644): prog-id=590 op=LOAD type=SYSCALL msg=audit(1744636904.194:18644): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000237ad0 a2=90 a3=0 items=0 ppid=90361 pid=90372 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636904.194:18644): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3263366362623161373362643737616262646130396662396632663732 type=BPF msg=audit(1744636904.194:18645): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636904.194:18646): prog-id=591 op=LOAD type=SYSCALL msg=audit(1744636904.194:18646): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000237c48 a2=90 a3=0 items=0 ppid=90361 pid=90372 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636904.194:18646): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3263366362623161373362643737616262646130396662396632663732 type=BPF msg=audit(1744636904.194:18647): prog-id=592 op=LOAD type=SYSCALL msg=audit(1744636904.194:18647): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0002379d8 a2=90 a3=0 items=0 ppid=90361 pid=90372 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636904.194:18647): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3263366362623161373362643737616262646130396662396632663732 type=BPF msg=audit(1744636904.194:18648): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636904.194:18649): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636904.195:18650): prog-id=593 op=LOAD type=SYSCALL msg=audit(1744636904.195:18650): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000237eb0 a2=90 a3=0 items=0 ppid=90361 pid=90372 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636904.195:18650): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3263366362623161373362643737616262646130396662396632663732 type=BPF msg=audit(1744636904.427:18651): prog-id=594 op=LOAD type=BPF msg=audit(1744636904.429:18652): prog-id=595 op=LOAD type=SYSCALL msg=audit(1744636904.429:18652): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001bfad0 a2=90 a3=0 items=0 ppid=90398 pid=90413 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636904.429:18652): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6137616533353933316261633831336433343731383435373964323634 type=BPF msg=audit(1744636904.429:18653): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636904.429:18654): prog-id=596 op=LOAD type=SYSCALL msg=audit(1744636904.429:18654): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001bfc48 a2=90 a3=0 items=0 ppid=90398 pid=90413 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636904.429:18654): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6137616533353933316261633831336433343731383435373964323634 type=BPF msg=audit(1744636904.429:18655): prog-id=597 op=LOAD type=SYSCALL msg=audit(1744636904.429:18655): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001bf9d8 a2=90 a3=0 items=0 ppid=90398 pid=90413 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636904.429:18655): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6137616533353933316261633831336433343731383435373964323634 type=BPF msg=audit(1744636904.429:18656): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636904.429:18657): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636904.429:18658): prog-id=598 op=LOAD type=SYSCALL msg=audit(1744636904.429:18658): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001bfeb0 a2=90 a3=0 items=0 ppid=90398 pid=90413 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636904.429:18658): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6137616533353933316261633831336433343731383435373964323634 type=USER_ACCT msg=audit(1744636905.623:18659): pid=90447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset" type=USER_CMD msg=audit(1744636905.625:18660): pid=90447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd=6970206E65746E73206164642076726F757465722D63643764643634322D653866632D343264632D623730622D6239616133626463633662373A63316466353337382D333630612D346464372D613839312D306265663530643334306532 terminal=? res=success'UID="root" AUID="unset" type=CRED_REFR msg=audit(1744636905.637:18661): pid=90447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset" type=USER_START msg=audit(1744636905.641:18662): pid=90447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset" type=USER_END msg=audit(1744636905.644:18663): pid=90447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset" type=CRED_DISP msg=audit(1744636905.644:18664): pid=90447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1744636905.656:18665): pid=90449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset" type=USER_CMD msg=audit(1744636905.657:18666): pid=90449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd=6970206E65746E7320657865632076726F757465722D63643764643634322D653866632D343264632D623730622D6239616133626463633662373A63316466353337382D333630612D346464372D613839312D306265663530643334306532206970206C696E6B20736574206C6F207570 terminal=? res=success'UID="root" AUID="unset" type=CRED_REFR msg=audit(1744636905.657:18667): pid=90449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset" type=USER_START msg=audit(1744636905.658:18668): pid=90449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset" type=USER_END msg=audit(1744636905.662:18669): pid=90449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset" type=CRED_DISP msg=audit(1744636905.662:18670): pid=90449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1744636905.686:18671): pid=90451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset" type=USER_CMD msg=audit(1744636905.687:18672): pid=90451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd=6970206E65746E7320657865632076726F757465722D63643764643634322D653866632D343264632D623730622D6239616133626463633662373A63316466353337382D333630612D346464372D613839312D306265663530643334306532206970202D6F206C696E6B2073686F772067772D62373330616365372D3937 terminal=? res=success'UID="root" AUID="unset" type=CRED_REFR msg=audit(1744636905.688:18673): pid=90451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset" type=USER_START msg=audit(1744636905.694:18674): pid=90451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset" type=USER_END msg=audit(1744636905.705:18675): pid=90451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset" type=CRED_DISP msg=audit(1744636905.705:18676): pid=90451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1744636905.724:18677): pid=90456 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset" type=USER_CMD msg=audit(1744636905.725:18678): pid=90456 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd=6970206C696E6B20616464207665746862373330616365372D39207479706520766574682070656572206E616D652067772D62373330616365372D3937206E65746E732076726F757465722D63643764643634322D653866632D343264632D623730622D6239616133626463633662373A63316466353337382D333630612D346464372D613839312D306265663530643334306532 terminal=? res=success'UID="root" AUID="unset" type=CRED_REFR msg=audit(1744636905.725:18679): pid=90456 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset" type=USER_START msg=audit(1744636905.727:18680): pid=90456 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset" type=USER_END msg=audit(1744636905.754:18681): pid=90456 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset" type=CRED_DISP msg=audit(1744636905.754:18682): pid=90456 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1744636905.783:18683): pid=90462 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset" type=USER_CMD msg=audit(1744636905.784:18684): pid=90462 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd=6970206E65746E7320657865632076726F757465722D63643764643634322D653866632D343264632D623730622D6239616133626463633662373A63316466353337382D333630612D346464372D613839312D306265663530643334306532206970206C696E6B207365742067772D62373330616365372D3937206164647265737320323A31383A32303A64333A61353A3836 terminal=? res=success'UID="root" AUID="unset" type=CRED_REFR msg=audit(1744636905.787:18685): pid=90462 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset" type=USER_START msg=audit(1744636905.789:18686): pid=90462 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset" type=USER_END msg=audit(1744636905.794:18687): pid=90462 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset" type=CRED_DISP msg=audit(1744636905.794:18688): pid=90462 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1744636905.838:18689): pid=90471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset" type=USER_CMD msg=audit(1744636905.839:18690): pid=90471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd=6970206E65746E7320657865632076726F757465722D63643764643634322D653866632D343264632D623730622D6239616133626463633662373A63316466353337382D333630612D346464372D613839312D306265663530643334306532206970206C696E6B207365742067772D62373330616365372D3937207570 terminal=? res=success'UID="root" AUID="unset" type=CRED_REFR msg=audit(1744636905.840:18691): pid=90471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset" type=USER_START msg=audit(1744636905.843:18692): pid=90471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset" type=USER_END msg=audit(1744636905.863:18693): pid=90471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset" type=CRED_DISP msg=audit(1744636905.864:18694): pid=90471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1744636905.883:18695): pid=90473 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset" type=USER_CMD msg=audit(1744636905.883:18696): pid=90473 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd=6970206C696E6B20736574207665746862373330616365372D39207570 terminal=? res=success'UID="root" AUID="unset" type=CRED_REFR msg=audit(1744636905.884:18697): pid=90473 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset" type=USER_START msg=audit(1744636905.885:18698): pid=90473 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset" type=USER_END msg=audit(1744636905.912:18699): pid=90473 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset" type=CRED_DISP msg=audit(1744636905.912:18700): pid=90473 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1744636905.955:18701): pid=90475 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset" type=USER_CMD msg=audit(1744636905.955:18702): pid=90475 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd=6970206E65746E7320657865632076726F757465722D63643764643634322D653866632D343264632D623730622D6239616133626463633662373A63316466353337382D333630612D346464372D613839312D306265663530643334306532206970206164647220666C7573682067772D62373330616365372D3937 terminal=? res=success'UID="root" AUID="unset" type=CRED_REFR msg=audit(1744636905.955:18703): pid=90475 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset" type=USER_START msg=audit(1744636905.956:18704): pid=90475 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset" type=USER_END msg=audit(1744636905.960:18705): pid=90475 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset" type=CRED_DISP msg=audit(1744636905.960:18706): pid=90475 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1744636905.994:18707): pid=90477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset" type=USER_CMD msg=audit(1744636905.994:18708): pid=90477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd=6970206E65746E7320657865632076726F757465722D63643764643634322D653866632D343264632D623730622D6239616133626463633662373A63316466353337382D333630612D346464372D613839312D306265663530643334306532206970202D342061646472206164642031302E34372E3235352E3234362F3132206272642031302E34372E3235352E3235352073636F706520676C6F62616C206465762067772D62373330616365372D3937 terminal=? res=success'UID="root" AUID="unset" type=CRED_REFR msg=audit(1744636905.994:18709): pid=90477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset" type=USER_START msg=audit(1744636905.997:18710): pid=90477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset" type=USER_END msg=audit(1744636906.000:18711): pid=90477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset" type=CRED_DISP msg=audit(1744636906.000:18712): pid=90477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1744636906.020:18713): pid=90479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset" type=USER_CMD msg=audit(1744636906.040:18714): pid=90479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd=6970206E65746E7320657865632076726F757465722D63643764643634322D653866632D343264632D623730622D6239616133626463633662373A63316466353337382D333630612D346464372D613839312D3062656635306433343065322073797363746C202D77206E65742E697076342E636F6E662E67772D62373330616365372D39372E72705F66696C7465723D32 terminal=? res=success'UID="root" AUID="unset" type=CRED_REFR msg=audit(1744636906.041:18715): pid=90479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset" type=USER_START msg=audit(1744636906.045:18716): pid=90479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset" type=USER_END msg=audit(1744636906.059:18717): pid=90479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset" type=CRED_DISP msg=audit(1744636906.059:18718): pid=90479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1744636906.113:18719): pid=90485 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset" type=USER_CMD msg=audit(1744636906.113:18720): pid=90485 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd=6970206E65746E7320657865632076726F757465722D63643764643634322D653866632D343264632D623730622D6239616133626463633662373A63316466353337382D333630612D346464372D613839312D30626566353064333430653220726F757465206164642064656661756C742067772031302E34372E3235352E323534 terminal=? res=success'UID="root" AUID="unset" type=CRED_REFR msg=audit(1744636906.113:18721): pid=90485 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset" type=USER_START msg=audit(1744636906.117:18722): pid=90485 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset" type=USER_END msg=audit(1744636906.123:18723): pid=90485 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset" type=CRED_DISP msg=audit(1744636906.123:18724): pid=90485 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1744636907.575:18725): pid=90508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset" type=USER_CMD msg=audit(1744636907.576:18726): pid=90508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd=6970206E65746E7320657865632076726F757465722D63643764643634322D653866632D343264632D623730622D6239616133626463633662373A63316466353337382D333630612D346464372D613839312D30626566353064333430653220726F757465206164642064656661756C742067772031302E34372E3235352E323534 terminal=? res=success'UID="root" AUID="unset" type=CRED_REFR msg=audit(1744636907.576:18727): pid=90508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset" type=USER_START msg=audit(1744636907.578:18728): pid=90508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset" type=USER_END msg=audit(1744636907.581:18729): pid=90508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset" type=CRED_DISP msg=audit(1744636907.581:18730): pid=90508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1744636908.912:18731): pid=90525 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset" type=USER_CMD msg=audit(1744636908.913:18732): pid=90525 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd=6970206E65746E7320657865632076726F757465722D63643764643634322D653866632D343264632D623730622D6239616133626463633662373A63316466353337382D333630612D346464372D613839312D30626566353064333430653220726F757465206164642064656661756C742067772031302E34372E3235352E323534 terminal=? res=success'UID="root" AUID="unset" type=CRED_REFR msg=audit(1744636908.913:18733): pid=90525 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset" type=USER_START msg=audit(1744636908.914:18734): pid=90525 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset" type=USER_END msg=audit(1744636908.918:18735): pid=90525 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset" type=CRED_DISP msg=audit(1744636908.919:18736): pid=90525 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1744636910.193:18737): pid=90554 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset" type=USER_CMD msg=audit(1744636910.193:18738): pid=90554 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd=6970206E65746E7320657865632076726F757465722D63643764643634322D653866632D343264632D623730622D6239616133626463633662373A63316466353337382D333630612D346464372D613839312D30626566353064333430653220726F757465206164642064656661756C742067772031302E34372E3235352E323534 terminal=? res=success'UID="root" AUID="unset" type=CRED_REFR msg=audit(1744636910.193:18739): pid=90554 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset" type=USER_START msg=audit(1744636910.195:18740): pid=90554 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset" type=USER_END msg=audit(1744636910.201:18741): pid=90554 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset" type=CRED_DISP msg=audit(1744636910.201:18742): pid=90554 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1744636910.936:18743): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbus-:1.2-org.fedoraproject.SetroubleshootPrivileged@3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1744636910.942:18744): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=setroubleshootd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1744636913.007:18745): prog-id=599 op=LOAD type=BPF msg=audit(1744636913.008:18746): prog-id=600 op=LOAD type=SYSCALL msg=audit(1744636913.008:18746): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000235ad0 a2=90 a3=0 items=0 ppid=90361 pid=90744 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636913.008:18746): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3331356633396639363139623565343465346536613737623934383535 type=BPF msg=audit(1744636913.008:18747): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636913.008:18748): prog-id=601 op=LOAD type=SYSCALL msg=audit(1744636913.008:18748): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000235c48 a2=90 a3=0 items=0 ppid=90361 pid=90744 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636913.008:18748): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3331356633396639363139623565343465346536613737623934383535 type=BPF msg=audit(1744636913.009:18749): prog-id=602 op=LOAD type=SYSCALL msg=audit(1744636913.009:18749): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0002359d8 a2=90 a3=0 items=0 ppid=90361 pid=90744 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636913.009:18749): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3331356633396639363139623565343465346536613737623934383535 type=BPF msg=audit(1744636913.009:18750): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636913.009:18751): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636913.009:18752): prog-id=603 op=LOAD type=SYSCALL msg=audit(1744636913.009:18752): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000235eb0 a2=90 a3=0 items=0 ppid=90361 pid=90744 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636913.009:18752): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3331356633396639363139623565343465346536613737623934383535 type=SERVICE_STOP msg=audit(1744636913.423:18753): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1744636913.447:18754): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636913.447:18755): prog-id=0 op=UNLOAD type=NETFILTER_CFG msg=audit(1744636913.791:18756): table=filter family=2 entries=51 op=xt_replace pid=90918 subj=system_u:system_r:spc_t:s0 comm="iptables-restor" type=SYSCALL msg=audit(1744636913.791:18756): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=558baa685080 items=0 ppid=25833 pid=90918 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636913.791:18756): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 type=NETFILTER_CFG msg=audit(1744636913.794:18757): table=nat family=2 entries=103 op=xt_replace pid=90918 subj=system_u:system_r:spc_t:s0 comm="iptables-restor" type=SYSCALL msg=audit(1744636913.794:18757): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=558baa699210 items=0 ppid=25833 pid=90918 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636913.794:18757): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 type=BPF msg=audit(1744636914.050:18758): prog-id=604 op=LOAD type=BPF msg=audit(1744636914.051:18759): prog-id=605 op=LOAD type=SYSCALL msg=audit(1744636914.051:18759): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001bdad0 a2=90 a3=0 items=0 ppid=90398 pid=90927 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636914.051:18759): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6665306333363134356262303338383130346263383335326264613034 type=BPF msg=audit(1744636914.051:18760): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636914.051:18761): prog-id=606 op=LOAD type=SYSCALL msg=audit(1744636914.051:18761): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001bdc48 a2=90 a3=0 items=0 ppid=90398 pid=90927 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636914.051:18761): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6665306333363134356262303338383130346263383335326264613034 type=BPF msg=audit(1744636914.051:18762): prog-id=607 op=LOAD type=SYSCALL msg=audit(1744636914.051:18762): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001bd9d8 a2=90 a3=0 items=0 ppid=90398 pid=90927 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636914.051:18762): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6665306333363134356262303338383130346263383335326264613034 type=BPF msg=audit(1744636914.052:18763): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636914.052:18764): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636914.052:18765): prog-id=608 op=LOAD type=SYSCALL msg=audit(1744636914.052:18765): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001bdeb0 a2=90 a3=0 items=0 ppid=90398 pid=90927 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636914.052:18765): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6665306333363134356262303338383130346263383335326264613034 type=NETFILTER_CFG msg=audit(1744636914.778:18766): table=filter family=2 entries=50 op=xt_replace pid=91006 subj=system_u:system_r:spc_t:s0 comm="iptables-restor" type=SYSCALL msg=audit(1744636914.778:18766): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=5591fc9aec60 items=0 ppid=25833 pid=91006 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636914.778:18766): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 type=NETFILTER_CFG msg=audit(1744636914.781:18767): table=nat family=2 entries=112 op=xt_replace pid=91006 subj=system_u:system_r:spc_t:s0 comm="iptables-restor" type=SYSCALL msg=audit(1744636914.781:18767): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=5591fc9c44c0 items=0 ppid=25833 pid=91006 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636914.781:18767): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 type=AVC msg=audit(1744636916.350:18768): avc: denied { read } for pid=91063 comm="systemd-sysctl" name="60-tf-node-init.conf" dev="vda5" ino=10096909 scontext=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 type=AVC msg=audit(1744636916.350:18768): avc: denied { open } for pid=91063 comm="systemd-sysctl" path="/etc/sysctl.d/60-tf-node-init.conf" dev="vda5" ino=10096909 scontext=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 type=SYSCALL msg=audit(1744636916.350:18768): arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=559f619dacf0 a2=80000 a3=0 items=0 ppid=91054 pid=91063 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-sysctl" exe="/usr/lib/systemd/systemd-sysctl" subj=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=openat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636916.350:18768): proctitle=2F7573722F6C69622F73797374656D642F73797374656D642D73797363746C002D2D7072656669783D6E65742F697076342F636F6E662F746D70657468302D66343438313000002D2D7072656669783D6E65742F697076342F6E656967682F746D70657468302D66343438313000002D2D7072656669783D6E65742F69707636 type=AVC msg=audit(1744636916.350:18769): avc: denied { getattr } for pid=91063 comm="systemd-sysctl" path="/etc/sysctl.d/60-tf-node-init.conf" dev="vda5" ino=10096909 scontext=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 type=SYSCALL msg=audit(1744636916.350:18769): arch=c000003e syscall=262 success=yes exit=0 a0=3 a1=7f5f661b7f35 a2=7ffc9d321710 a3=1000 items=0 ppid=91054 pid=91063 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-sysctl" exe="/usr/lib/systemd/systemd-sysctl" subj=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636916.350:18769): proctitle=2F7573722F6C69622F73797374656D642F73797374656D642D73797363746C002D2D7072656669783D6E65742F697076342F636F6E662F746D70657468302D66343438313000002D2D7072656669783D6E65742F697076342F6E656967682F746D70657468302D66343438313000002D2D7072656669783D6E65742F69707636 type=AVC msg=audit(1744636916.350:18770): avc: denied { ioctl } for pid=91063 comm="systemd-sysctl" path="/etc/sysctl.d/60-tf-node-init.conf" dev="vda5" ino=10096909 ioctlcmd=0x5401 scontext=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 type=SYSCALL msg=audit(1744636916.350:18770): arch=c000003e syscall=16 success=no exit=-25 a0=3 a1=5401 a2=7ffc9d321810 a3=559f619d4040 items=0 ppid=91054 pid=91063 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-sysctl" exe="/usr/lib/systemd/systemd-sysctl" subj=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=ioctl AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636916.350:18770): proctitle=2F7573722F6C69622F73797374656D642F73797374656D642D73797363746C002D2D7072656669783D6E65742F697076342F636F6E662F746D70657468302D66343438313000002D2D7072656669783D6E65742F697076342F6E656967682F746D70657468302D66343438313000002D2D7072656669783D6E65742F69707636 type=SERVICE_START msg=audit(1744636916.695:18771): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=setroubleshootd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1744636916.939:18772): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbus-:1.2-org.fedoraproject.SetroubleshootPrivileged@4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1744636921.430:18773): prog-id=609 op=LOAD type=BPF msg=audit(1744636921.431:18774): prog-id=610 op=LOAD type=SYSCALL msg=audit(1744636921.431:18774): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000123ad0 a2=90 a3=0 items=0 ppid=91128 pid=91139 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636921.431:18774): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3065333764396266313064623538653364646231643430306462616664 type=BPF msg=audit(1744636921.432:18775): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636921.432:18776): prog-id=611 op=LOAD type=SYSCALL msg=audit(1744636921.432:18776): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000123c48 a2=90 a3=0 items=0 ppid=91128 pid=91139 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636921.432:18776): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3065333764396266313064623538653364646231643430306462616664 type=BPF msg=audit(1744636921.432:18777): prog-id=612 op=LOAD type=SYSCALL msg=audit(1744636921.432:18777): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001239d8 a2=90 a3=0 items=0 ppid=91128 pid=91139 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636921.432:18777): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3065333764396266313064623538653364646231643430306462616664 type=BPF msg=audit(1744636921.432:18778): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636921.432:18779): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636921.432:18780): prog-id=613 op=LOAD type=SYSCALL msg=audit(1744636921.432:18780): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000123eb0 a2=90 a3=0 items=0 ppid=91128 pid=91139 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636921.432:18780): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3065333764396266313064623538653364646231643430306462616664 type=BPF msg=audit(1744636924.901:18781): prog-id=614 op=LOAD type=BPF msg=audit(1744636924.902:18782): prog-id=615 op=LOAD type=SYSCALL msg=audit(1744636924.902:18782): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000143ad0 a2=90 a3=0 items=0 ppid=91128 pid=91181 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636924.902:18782): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3662653933646162356164643131363731326232343833373531343030 type=BPF msg=audit(1744636924.902:18783): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636924.902:18784): prog-id=616 op=LOAD type=SYSCALL msg=audit(1744636924.902:18784): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000143c48 a2=90 a3=0 items=0 ppid=91128 pid=91181 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636924.902:18784): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3662653933646162356164643131363731326232343833373531343030 type=BPF msg=audit(1744636924.902:18785): prog-id=617 op=LOAD type=SYSCALL msg=audit(1744636924.902:18785): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001439d8 a2=90 a3=0 items=0 ppid=91128 pid=91181 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636924.902:18785): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3662653933646162356164643131363731326232343833373531343030 type=BPF msg=audit(1744636924.902:18786): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636924.902:18787): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636924.902:18788): prog-id=618 op=LOAD type=SYSCALL msg=audit(1744636924.902:18788): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000143eb0 a2=90 a3=0 items=0 ppid=91128 pid=91181 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636924.902:18788): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3662653933646162356164643131363731326232343833373531343030 type=SERVICE_STOP msg=audit(1744636928.036:18789): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbus-:1.2-org.fedoraproject.SetroubleshootPrivileged@4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1744636928.068:18790): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=setroubleshootd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1744636957.782:18791): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636957.782:18792): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636957.843:18793): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636957.843:18794): prog-id=0 op=UNLOAD type=USER_ACCT msg=audit(1744636964.892:18795): pid=91611 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset" type=USER_CMD msg=audit(1744636964.892:18796): pid=91611 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd=6970206E65746E7320657865632076726F757465722D63643764643634322D653866632D343264632D623730622D6239616133626463633662373A63316466353337382D333630612D346464372D613839312D30626566353064333430653220726F757465206164642064656661756C742067772031302E34372E3235352E323534 terminal=? res=success'UID="root" AUID="unset" type=CRED_REFR msg=audit(1744636964.898:18797): pid=91611 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset" type=USER_START msg=audit(1744636964.899:18798): pid=91611 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset" type=USER_END msg=audit(1744636964.902:18799): pid=91611 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset" type=CRED_DISP msg=audit(1744636964.902:18800): pid=91611 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1744636965.569:18801): pid=91622 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset" type=USER_CMD msg=audit(1744636965.570:18802): pid=91622 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd=6970206E65746E7320657865632076726F757465722D63643764643634322D653866632D343264632D623730622D6239616133626463633662373A63316466353337382D333630612D346464372D613839312D30626566353064333430653220726F757465206164642064656661756C742067772031302E34372E3235352E323534 terminal=? res=success'UID="root" AUID="unset" type=CRED_REFR msg=audit(1744636965.570:18803): pid=91622 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset" type=USER_START msg=audit(1744636965.571:18804): pid=91622 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset" type=USER_END msg=audit(1744636965.574:18805): pid=91622 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset" type=CRED_DISP msg=audit(1744636965.574:18806): pid=91622 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1744636965.969:18807): pid=91631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset" type=USER_CMD msg=audit(1744636965.969:18808): pid=91631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd=6970206E65746E7320657865632076726F757465722D63643764643634322D653866632D343264632D623730622D6239616133626463633662373A63316466353337382D333630612D346464372D613839312D30626566353064333430653220726F757465206164642064656661756C742067772031302E34372E3235352E323534 terminal=? res=success'UID="root" AUID="unset" type=CRED_REFR msg=audit(1744636965.970:18809): pid=91631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset" type=USER_START msg=audit(1744636965.971:18810): pid=91631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset" type=USER_END msg=audit(1744636965.974:18811): pid=91631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset" type=CRED_DISP msg=audit(1744636965.974:18812): pid=91631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1744636966.950:18813): pid=91641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset" type=USER_CMD msg=audit(1744636966.950:18814): pid=91641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd=6970206E65746E7320657865632076726F757465722D63643764643634322D653866632D343264632D623730622D6239616133626463633662373A63316466353337382D333630612D346464372D613839312D30626566353064333430653220726F7574652064656C2064656661756C74 terminal=? res=success'UID="root" AUID="unset" type=CRED_REFR msg=audit(1744636966.951:18815): pid=91641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset" type=USER_START msg=audit(1744636966.954:18816): pid=91641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset" type=USER_END msg=audit(1744636966.964:18817): pid=91641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset" type=CRED_DISP msg=audit(1744636966.964:18818): pid=91641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1744636966.996:18819): pid=91645 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset" type=USER_CMD msg=audit(1744636966.997:18820): pid=91645 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd=6970206E65746E7320657865632076726F757465722D63643764643634322D653866632D343264632D623730622D6239616133626463633662373A63316466353337382D333630612D346464372D613839312D306265663530643334306532206970202D6F202D64206C696E6B206C697374 terminal=? res=success'UID="root" AUID="unset" type=CRED_REFR msg=audit(1744636966.997:18821): pid=91645 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset" type=USER_START msg=audit(1744636966.998:18822): pid=91645 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset" type=USER_END msg=audit(1744636967.001:18823): pid=91645 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset" type=CRED_DISP msg=audit(1744636967.002:18824): pid=91645 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1744636967.038:18825): pid=91647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset" type=USER_CMD msg=audit(1744636967.038:18826): pid=91647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd=6970206E65746E7320657865632076726F757465722D63643764643634322D653866632D343264632D623730622D6239616133626463633662373A63316466353337382D333630612D346464372D613839312D306265663530643334306532206970206C696E6B2064656C6574652067772D62373330616365372D3937 terminal=? res=success'UID="root" AUID="unset" type=CRED_REFR msg=audit(1744636967.039:18827): pid=91647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset" type=USER_START msg=audit(1744636967.046:18828): pid=91647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset" type=USER_END msg=audit(1744636967.065:18829): pid=91647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset" type=CRED_DISP msg=audit(1744636967.065:18830): pid=91647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1744636967.084:18831): pid=91651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset" type=USER_CMD msg=audit(1744636967.084:18832): pid=91651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd=6970206E65746E732064656C6574652076726F757465722D63643764643634322D653866632D343264632D623730622D6239616133626463633662373A63316466353337382D333630612D346464372D613839312D306265663530643334306532 terminal=? res=success'UID="root" AUID="unset" type=CRED_REFR msg=audit(1744636967.084:18833): pid=91651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset" type=USER_START msg=audit(1744636967.085:18834): pid=91651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset" type=USER_END msg=audit(1744636967.089:18835): pid=91651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset" type=CRED_DISP msg=audit(1744636967.089:18836): pid=91651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset" type=BPF msg=audit(1744636967.160:18837): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636967.160:18838): prog-id=0 op=UNLOAD type=NETFILTER_CFG msg=audit(1744636967.166:18839): table=filter family=2 entries=50 op=xt_replace pid=91687 subj=system_u:system_r:spc_t:s0 comm="iptables-restor" type=SYSCALL msg=audit(1744636967.166:18839): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=555bb9d0dc60 items=0 ppid=25833 pid=91687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636967.166:18839): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 type=NETFILTER_CFG msg=audit(1744636967.168:18840): table=nat family=2 entries=117 op=xt_replace pid=91687 subj=system_u:system_r:spc_t:s0 comm="iptables-restor" type=SYSCALL msg=audit(1744636967.168:18840): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=555bb9d23690 items=0 ppid=25833 pid=91687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636967.168:18840): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 type=BPF msg=audit(1744636967.221:18841): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636967.221:18842): prog-id=0 op=UNLOAD type=NETFILTER_CFG msg=audit(1744636967.913:18843): table=filter family=2 entries=50 op=xt_replace pid=91825 subj=system_u:system_r:spc_t:s0 comm="iptables-restor" type=SYSCALL msg=audit(1744636967.913:18843): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55ba7a11cc60 items=0 ppid=25833 pid=91825 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636967.913:18843): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 type=NETFILTER_CFG msg=audit(1744636967.916:18844): table=nat family=2 entries=112 op=xt_replace pid=91825 subj=system_u:system_r:spc_t:s0 comm="iptables-restor" type=SYSCALL msg=audit(1744636967.916:18844): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55ba7a131b50 items=0 ppid=25833 pid=91825 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636967.916:18844): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 type=BPF msg=audit(1744636972.220:18845): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636972.220:18846): prog-id=0 op=UNLOAD type=NETFILTER_CFG msg=audit(1744636972.237:18847): table=filter family=2 entries=50 op=xt_replace pid=92133 subj=system_u:system_r:spc_t:s0 comm="iptables-restor" type=SYSCALL msg=audit(1744636972.237:18847): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=556a9ddbb290 items=0 ppid=25833 pid=92133 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636972.237:18847): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 type=NETFILTER_CFG msg=audit(1744636972.240:18848): table=nat family=2 entries=112 op=xt_replace pid=92133 subj=system_u:system_r:spc_t:s0 comm="iptables-restor" type=SYSCALL msg=audit(1744636972.240:18848): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=556a9ddcd300 items=0 ppid=25833 pid=92133 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636972.240:18848): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 type=BPF msg=audit(1744636972.286:18849): prog-id=0 op=UNLOAD type=BPF msg=audit(1744636972.286:18850): prog-id=0 op=UNLOAD type=NETFILTER_CFG msg=audit(1744636972.930:18851): table=filter family=2 entries=51 op=xt_replace pid=92225 subj=system_u:system_r:spc_t:s0 comm="iptables-restor" type=SYSCALL msg=audit(1744636972.930:18851): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=563e50cbb360 items=0 ppid=25833 pid=92225 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636972.930:18851): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 type=NETFILTER_CFG msg=audit(1744636972.932:18852): table=nat family=2 entries=103 op=xt_replace pid=92225 subj=system_u:system_r:spc_t:s0 comm="iptables-restor" type=SYSCALL msg=audit(1744636972.932:18852): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=563e50ccc760 items=0 ppid=25833 pid=92225 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636972.932:18852): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 type=NETFILTER_CFG msg=audit(1744636973.965:18853): table=filter family=2 entries=51 op=xt_replace pid=92264 subj=system_u:system_r:spc_t:s0 comm="iptables-restor" type=SYSCALL msg=audit(1744636973.965:18853): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55630e63b360 items=0 ppid=25833 pid=92264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636973.965:18853): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 type=NETFILTER_CFG msg=audit(1744636973.967:18854): table=nat family=2 entries=103 op=xt_replace pid=92264 subj=system_u:system_r:spc_t:s0 comm="iptables-restor" type=SYSCALL msg=audit(1744636973.967:18854): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55630e64c710 items=0 ppid=25833 pid=92264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744636973.967:18854): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 type=USER_LOGIN msg=audit(1744636977.223:18855): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636977.224:18856): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636977.227:18857): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=92265 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=BPF msg=audit(1744636977.284:18858): prog-id=619 op=LOAD type=BPF msg=audit(1744636977.284:18859): prog-id=620 op=LOAD type=SERVICE_START msg=audit(1744636977.507:18860): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1744636977.532:18861): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636977.532:18862): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636977.574:18863): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636977.575:18864): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636977.576:18865): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=92299 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636977.626:18866): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636977.626:18867): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636977.668:18868): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636977.668:18869): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636977.670:18870): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=92335 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744636977.722:18871): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636977.722:18872): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636984.162:18873): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636984.162:18874): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636984.164:18875): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=92408 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636984.238:18876): pid=92408 uid=1000 auid=1000 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636984.239:18877): pid=92408 uid=1000 auid=1000 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F62617368202D6C202D6320646F636B6572206578656320202D2D70726976696C6567656420202D6974206B7562656D616E616765725F6B38735F6B7562656D616E616765725F31202F62696E2F62617368202D632020276772657020225E5B20095D2A636C75737465725F70726F6A65637422202F6574632F636F6E747261696C2F636F6E747261696C2D6B756265726E657465732E636F6E6627 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636984.240:18878): pid=92408 uid=1000 auid=1000 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636984.244:18879): pid=92408 uid=1000 auid=1000 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636984.380:18880): pid=92408 uid=1000 auid=1000 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636984.381:18881): pid=92408 uid=1000 auid=1000 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636984.382:18882): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636984.382:18883): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636984.477:18884): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636984.477:18885): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636984.480:18886): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=92474 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636984.556:18887): pid=92474 uid=1000 auid=1000 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636984.556:18888): pid=92474 uid=1000 auid=1000 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F62617368202D6C202D6320646F636B6572206578656320202D2D70726976696C6567656420202D6974206B7562656D616E616765725F6B38735F6B7562656D616E616765725F31202F62696E2F62617368202D632020276E657473746174202D616E7470207C2067726570203A38313038207C2067726570204C495354454E27 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636984.557:18889): pid=92474 uid=1000 auid=1000 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636984.561:18890): pid=92474 uid=1000 auid=1000 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636984.698:18891): pid=92474 uid=1000 auid=1000 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636984.698:18892): pid=92474 uid=1000 auid=1000 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636984.700:18893): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636984.700:18894): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744636984.744:18895): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744636984.744:18896): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744636984.746:18897): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=92551 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744636984.815:18898): pid=92551 uid=1000 auid=1000 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744636984.815:18899): pid=92551 uid=1000 auid=1000 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F62617368202D6C202D6320646F636B6572206578656320202D2D70726976696C6567656420202D6974206B7562656D616E616765725F6B38735F6B7562656D616E616765725F31202F62696E2F62617368202D632020276772657020225E5B20095D2A636C75737465725F70726F6A65637422202F6574632F636F6E747261696C2F636F6E747261696C2D6B756265726E657465732E636F6E6627 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744636984.815:18900): pid=92551 uid=1000 auid=1000 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744636984.817:18901): pid=92551 uid=1000 auid=1000 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636984.935:18902): pid=92551 uid=1000 auid=1000 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744636984.935:18903): pid=92551 uid=1000 auid=1000 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744636984.937:18904): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744636984.937:18905): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=AVC msg=audit(1744637000.240:18906): avc: denied { read } for pid=92727 comm="systemd-sysctl" name="60-tf-node-init.conf" dev="vda5" ino=10096909 scontext=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 type=AVC msg=audit(1744637000.240:18906): avc: denied { open } for pid=92727 comm="systemd-sysctl" path="/etc/sysctl.d/60-tf-node-init.conf" dev="vda5" ino=10096909 scontext=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 type=SYSCALL msg=audit(1744637000.240:18906): arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=55ab30e61cf0 a2=80000 a3=0 items=0 ppid=92725 pid=92727 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-sysctl" exe="/usr/lib/systemd/systemd-sysctl" subj=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=openat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637000.240:18906): proctitle=2F7573722F6C69622F73797374656D642F73797374656D642D73797363746C002D2D7072656669783D6E65742F697076342F636F6E662F746D70657468302D33663861356400002D2D7072656669783D6E65742F697076342F6E656967682F746D70657468302D33663861356400002D2D7072656669783D6E65742F69707636 type=AVC msg=audit(1744637000.241:18907): avc: denied { getattr } for pid=92727 comm="systemd-sysctl" path="/etc/sysctl.d/60-tf-node-init.conf" dev="vda5" ino=10096909 scontext=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 type=SYSCALL msg=audit(1744637000.241:18907): arch=c000003e syscall=262 success=yes exit=0 a0=3 a1=7ff7d3fb7f35 a2=7ffef7e7df80 a3=1000 items=0 ppid=92725 pid=92727 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-sysctl" exe="/usr/lib/systemd/systemd-sysctl" subj=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637000.241:18907): proctitle=2F7573722F6C69622F73797374656D642F73797374656D642D73797363746C002D2D7072656669783D6E65742F697076342F636F6E662F746D70657468302D33663861356400002D2D7072656669783D6E65742F697076342F6E656967682F746D70657468302D33663861356400002D2D7072656669783D6E65742F69707636 type=AVC msg=audit(1744637000.241:18908): avc: denied { ioctl } for pid=92727 comm="systemd-sysctl" path="/etc/sysctl.d/60-tf-node-init.conf" dev="vda5" ino=10096909 ioctlcmd=0x5401 scontext=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 type=SYSCALL msg=audit(1744637000.241:18908): arch=c000003e syscall=16 success=no exit=-25 a0=3 a1=5401 a2=7ffef7e7e080 a3=55ab30e5b040 items=0 ppid=92725 pid=92727 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-sysctl" exe="/usr/lib/systemd/systemd-sysctl" subj=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=ioctl AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637000.241:18908): proctitle=2F7573722F6C69622F73797374656D642F73797374656D642D73797363746C002D2D7072656669783D6E65742F697076342F636F6E662F746D70657468302D33663861356400002D2D7072656669783D6E65742F697076342F6E656967682F746D70657468302D33663861356400002D2D7072656669783D6E65742F69707636 type=SERVICE_START msg=audit(1744637000.617:18909): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=setroubleshootd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1744637000.848:18910): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbus-:1.2-org.fedoraproject.SetroubleshootPrivileged@5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=AVC msg=audit(1744637005.266:18911): avc: denied { read } for pid=92756 comm="systemd-sysctl" name="60-tf-node-init.conf" dev="vda5" ino=10096909 scontext=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 type=AVC msg=audit(1744637005.266:18911): avc: denied { open } for pid=92756 comm="systemd-sysctl" path="/etc/sysctl.d/60-tf-node-init.conf" dev="vda5" ino=10096909 scontext=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 type=SYSCALL msg=audit(1744637005.266:18911): arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=562e5f421cf0 a2=80000 a3=0 items=0 ppid=92754 pid=92756 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-sysctl" exe="/usr/lib/systemd/systemd-sysctl" subj=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=openat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637005.266:18911): proctitle=2F7573722F6C69622F73797374656D642F73797374656D642D73797363746C002D2D7072656669783D6E65742F697076342F636F6E662F746D70657468302D36616362363400002D2D7072656669783D6E65742F697076342F6E656967682F746D70657468302D36616362363400002D2D7072656669783D6E65742F69707636 type=AVC msg=audit(1744637005.266:18912): avc: denied { getattr } for pid=92756 comm="systemd-sysctl" path="/etc/sysctl.d/60-tf-node-init.conf" dev="vda5" ino=10096909 scontext=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 type=SYSCALL msg=audit(1744637005.266:18912): arch=c000003e syscall=262 success=yes exit=0 a0=3 a1=7fee567b7f35 a2=7ffd6c42b230 a3=1000 items=0 ppid=92754 pid=92756 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-sysctl" exe="/usr/lib/systemd/systemd-sysctl" subj=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637005.266:18912): proctitle=2F7573722F6C69622F73797374656D642F73797374656D642D73797363746C002D2D7072656669783D6E65742F697076342F636F6E662F746D70657468302D36616362363400002D2D7072656669783D6E65742F697076342F6E656967682F746D70657468302D36616362363400002D2D7072656669783D6E65742F69707636 type=AVC msg=audit(1744637005.266:18913): avc: denied { ioctl } for pid=92756 comm="systemd-sysctl" path="/etc/sysctl.d/60-tf-node-init.conf" dev="vda5" ino=10096909 ioctlcmd=0x5401 scontext=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 type=SYSCALL msg=audit(1744637005.266:18913): arch=c000003e syscall=16 success=no exit=-25 a0=3 a1=5401 a2=7ffd6c42b330 a3=562e5f41b040 items=0 ppid=92754 pid=92756 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-sysctl" exe="/usr/lib/systemd/systemd-sysctl" subj=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=ioctl AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637005.266:18913): proctitle=2F7573722F6C69622F73797374656D642F73797374656D642D73797363746C002D2D7072656669783D6E65742F697076342F636F6E662F746D70657468302D36616362363400002D2D7072656669783D6E65742F697076342F6E656967682F746D70657468302D36616362363400002D2D7072656669783D6E65742F69707636 type=BPF msg=audit(1744637005.369:18914): prog-id=621 op=LOAD type=BPF msg=audit(1744637005.370:18915): prog-id=622 op=LOAD type=SYSCALL msg=audit(1744637005.370:18915): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000237ad0 a2=90 a3=0 items=0 ppid=92774 pid=92785 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637005.370:18915): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6135383232303436666466333035656537623331623935303963633965 type=BPF msg=audit(1744637005.371:18916): prog-id=0 op=UNLOAD type=BPF msg=audit(1744637005.371:18917): prog-id=623 op=LOAD type=SYSCALL msg=audit(1744637005.371:18917): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000237c48 a2=90 a3=0 items=0 ppid=92774 pid=92785 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637005.371:18917): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6135383232303436666466333035656537623331623935303963633965 type=BPF msg=audit(1744637005.371:18918): prog-id=624 op=LOAD type=SYSCALL msg=audit(1744637005.371:18918): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0002379d8 a2=90 a3=0 items=0 ppid=92774 pid=92785 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637005.371:18918): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6135383232303436666466333035656537623331623935303963633965 type=BPF msg=audit(1744637005.371:18919): prog-id=0 op=UNLOAD type=BPF msg=audit(1744637005.371:18920): prog-id=0 op=UNLOAD type=BPF msg=audit(1744637005.371:18921): prog-id=625 op=LOAD type=SYSCALL msg=audit(1744637005.371:18921): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000237eb0 a2=90 a3=0 items=0 ppid=92774 pid=92785 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637005.371:18921): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6135383232303436666466333035656537623331623935303963633965 type=BPF msg=audit(1744637006.546:18922): prog-id=626 op=LOAD type=BPF msg=audit(1744637006.547:18923): prog-id=627 op=LOAD type=SYSCALL msg=audit(1744637006.547:18923): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000233ad0 a2=90 a3=0 items=0 ppid=92774 pid=92820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637006.547:18923): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3564313038343139336165343463666562666638386361626538643661 type=BPF msg=audit(1744637006.547:18924): prog-id=0 op=UNLOAD type=BPF msg=audit(1744637006.547:18925): prog-id=628 op=LOAD type=SYSCALL msg=audit(1744637006.547:18925): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000233c48 a2=90 a3=0 items=0 ppid=92774 pid=92820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637006.547:18925): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3564313038343139336165343463666562666638386361626538643661 type=BPF msg=audit(1744637006.547:18926): prog-id=629 op=LOAD type=SYSCALL msg=audit(1744637006.547:18926): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0002339d8 a2=90 a3=0 items=0 ppid=92774 pid=92820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637006.547:18926): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3564313038343139336165343463666562666638386361626538643661 type=BPF msg=audit(1744637006.547:18927): prog-id=0 op=UNLOAD type=BPF msg=audit(1744637006.547:18928): prog-id=0 op=UNLOAD type=BPF msg=audit(1744637006.547:18929): prog-id=630 op=LOAD type=SYSCALL msg=audit(1744637006.547:18929): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000233eb0 a2=90 a3=0 items=0 ppid=92774 pid=92820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637006.547:18929): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3564313038343139336165343463666562666638386361626538643661 type=AVC msg=audit(1744637009.743:18930): avc: denied { read } for pid=92892 comm="systemd-sysctl" name="60-tf-node-init.conf" dev="vda5" ino=10096909 scontext=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 type=AVC msg=audit(1744637009.743:18930): avc: denied { open } for pid=92892 comm="systemd-sysctl" path="/etc/sysctl.d/60-tf-node-init.conf" dev="vda5" ino=10096909 scontext=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 type=SYSCALL msg=audit(1744637009.743:18930): arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=555ea37f5cf0 a2=80000 a3=0 items=0 ppid=92884 pid=92892 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-sysctl" exe="/usr/lib/systemd/systemd-sysctl" subj=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=openat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637009.743:18930): proctitle=2F7573722F6C69622F73797374656D642F73797374656D642D73797363746C002D2D7072656669783D6E65742F697076342F636F6E662F746D70657468302D30346563383000002D2D7072656669783D6E65742F697076342F6E656967682F746D70657468302D30346563383000002D2D7072656669783D6E65742F69707636 type=AVC msg=audit(1744637009.743:18931): avc: denied { getattr } for pid=92892 comm="systemd-sysctl" path="/etc/sysctl.d/60-tf-node-init.conf" dev="vda5" ino=10096909 scontext=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 type=SYSCALL msg=audit(1744637009.743:18931): arch=c000003e syscall=262 success=yes exit=0 a0=3 a1=7f74d6bb7f35 a2=7ffd2ef61fe0 a3=1000 items=0 ppid=92884 pid=92892 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-sysctl" exe="/usr/lib/systemd/systemd-sysctl" subj=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637009.743:18931): proctitle=2F7573722F6C69622F73797374656D642F73797374656D642D73797363746C002D2D7072656669783D6E65742F697076342F636F6E662F746D70657468302D30346563383000002D2D7072656669783D6E65742F697076342F6E656967682F746D70657468302D30346563383000002D2D7072656669783D6E65742F69707636 type=AVC msg=audit(1744637009.743:18932): avc: denied { ioctl } for pid=92892 comm="systemd-sysctl" path="/etc/sysctl.d/60-tf-node-init.conf" dev="vda5" ino=10096909 ioctlcmd=0x5401 scontext=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 type=SYSCALL msg=audit(1744637009.743:18932): arch=c000003e syscall=16 success=no exit=-25 a0=3 a1=5401 a2=7ffd2ef620e0 a3=555ea37ef040 items=0 ppid=92884 pid=92892 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-sysctl" exe="/usr/lib/systemd/systemd-sysctl" subj=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=ioctl AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637009.743:18932): proctitle=2F7573722F6C69622F73797374656D642F73797374656D642D73797363746C002D2D7072656669783D6E65742F697076342F636F6E662F746D70657468302D30346563383000002D2D7072656669783D6E65742F697076342F6E656967682F746D70657468302D30346563383000002D2D7072656669783D6E65742F69707636 type=BPF msg=audit(1744637009.812:18933): prog-id=631 op=LOAD type=BPF msg=audit(1744637009.813:18934): prog-id=632 op=LOAD type=SYSCALL msg=audit(1744637009.813:18934): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001bfad0 a2=90 a3=0 items=0 ppid=92910 pid=92921 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637009.813:18934): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3530373830373461343533653338663530303464396162333231623363 type=BPF msg=audit(1744637009.813:18935): prog-id=0 op=UNLOAD type=BPF msg=audit(1744637009.813:18936): prog-id=633 op=LOAD type=SYSCALL msg=audit(1744637009.813:18936): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001bfc48 a2=90 a3=0 items=0 ppid=92910 pid=92921 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637009.813:18936): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3530373830373461343533653338663530303464396162333231623363 type=BPF msg=audit(1744637009.813:18937): prog-id=634 op=LOAD type=SYSCALL msg=audit(1744637009.813:18937): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001bf9d8 a2=90 a3=0 items=0 ppid=92910 pid=92921 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637009.813:18937): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3530373830373461343533653338663530303464396162333231623363 type=BPF msg=audit(1744637009.813:18938): prog-id=0 op=UNLOAD type=BPF msg=audit(1744637009.813:18939): prog-id=0 op=UNLOAD type=BPF msg=audit(1744637009.813:18940): prog-id=635 op=LOAD type=SYSCALL msg=audit(1744637009.813:18940): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001bfeb0 a2=90 a3=0 items=0 ppid=92910 pid=92921 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637009.813:18940): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3530373830373461343533653338663530303464396162333231623363 type=BPF msg=audit(1744637010.365:18941): prog-id=636 op=LOAD type=BPF msg=audit(1744637010.365:18942): prog-id=637 op=LOAD type=SYSCALL msg=audit(1744637010.365:18942): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001a3ad0 a2=90 a3=0 items=0 ppid=92965 pid=92976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637010.365:18942): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531396562353337383939386332666239663534346366636535323938 type=BPF msg=audit(1744637010.366:18943): prog-id=0 op=UNLOAD type=BPF msg=audit(1744637010.366:18944): prog-id=638 op=LOAD type=SYSCALL msg=audit(1744637010.366:18944): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001a3c48 a2=90 a3=0 items=0 ppid=92965 pid=92976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637010.366:18944): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531396562353337383939386332666239663534346366636535323938 type=BPF msg=audit(1744637010.366:18945): prog-id=639 op=LOAD type=SYSCALL msg=audit(1744637010.366:18945): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001a39d8 a2=90 a3=0 items=0 ppid=92965 pid=92976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637010.366:18945): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531396562353337383939386332666239663534346366636535323938 type=BPF msg=audit(1744637010.366:18946): prog-id=0 op=UNLOAD type=BPF msg=audit(1744637010.366:18947): prog-id=0 op=UNLOAD type=BPF msg=audit(1744637010.366:18948): prog-id=640 op=LOAD type=SYSCALL msg=audit(1744637010.366:18948): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001a3eb0 a2=90 a3=0 items=0 ppid=92965 pid=92976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637010.366:18948): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531396562353337383939386332666239663534346366636535323938 type=BPF msg=audit(1744637010.982:18949): prog-id=641 op=LOAD type=BPF msg=audit(1744637010.983:18950): prog-id=642 op=LOAD type=SYSCALL msg=audit(1744637010.983:18950): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c00021dad0 a2=90 a3=0 items=0 ppid=92910 pid=93010 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637010.983:18950): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3464653964626464363732333933373932333932393530333562363837 type=BPF msg=audit(1744637010.983:18951): prog-id=0 op=UNLOAD type=BPF msg=audit(1744637010.983:18952): prog-id=643 op=LOAD type=SYSCALL msg=audit(1744637010.983:18952): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c00021dc48 a2=90 a3=0 items=0 ppid=92910 pid=93010 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637010.983:18952): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3464653964626464363732333933373932333932393530333562363837 type=BPF msg=audit(1744637010.983:18953): prog-id=644 op=LOAD type=SYSCALL msg=audit(1744637010.983:18953): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00021d9d8 a2=90 a3=0 items=0 ppid=92910 pid=93010 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637010.983:18953): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3464653964626464363732333933373932333932393530333562363837 type=BPF msg=audit(1744637010.983:18954): prog-id=0 op=UNLOAD type=BPF msg=audit(1744637010.983:18955): prog-id=0 op=UNLOAD type=BPF msg=audit(1744637010.984:18956): prog-id=645 op=LOAD type=SYSCALL msg=audit(1744637010.984:18956): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c00021deb0 a2=90 a3=0 items=0 ppid=92910 pid=93010 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637010.984:18956): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3464653964626464363732333933373932333932393530333562363837 type=BPF msg=audit(1744637012.090:18957): prog-id=646 op=LOAD type=BPF msg=audit(1744637012.091:18958): prog-id=647 op=LOAD type=SYSCALL msg=audit(1744637012.091:18958): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000233ad0 a2=90 a3=0 items=0 ppid=92965 pid=93070 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637012.091:18958): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3338656133633334313135343235316333643764326639656261656363 type=BPF msg=audit(1744637012.091:18959): prog-id=0 op=UNLOAD type=BPF msg=audit(1744637012.091:18960): prog-id=648 op=LOAD type=SYSCALL msg=audit(1744637012.091:18960): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000233c48 a2=90 a3=0 items=0 ppid=92965 pid=93070 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637012.091:18960): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3338656133633334313135343235316333643764326639656261656363 type=BPF msg=audit(1744637012.091:18961): prog-id=649 op=LOAD type=SYSCALL msg=audit(1744637012.091:18961): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0002339d8 a2=90 a3=0 items=0 ppid=92965 pid=93070 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637012.091:18961): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3338656133633334313135343235316333643764326639656261656363 type=BPF msg=audit(1744637012.091:18962): prog-id=0 op=UNLOAD type=BPF msg=audit(1744637012.091:18963): prog-id=0 op=UNLOAD type=BPF msg=audit(1744637012.091:18964): prog-id=650 op=LOAD type=SYSCALL msg=audit(1744637012.091:18964): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000233eb0 a2=90 a3=0 items=0 ppid=92965 pid=93070 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637012.091:18964): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3338656133633334313135343235316333643764326639656261656363 type=SERVICE_STOP msg=audit(1744637014.859:18965): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1744637014.888:18966): prog-id=0 op=UNLOAD type=BPF msg=audit(1744637014.888:18967): prog-id=0 op=UNLOAD type=BPF msg=audit(1744637015.133:18968): prog-id=651 op=LOAD type=BPF msg=audit(1744637015.134:18969): prog-id=652 op=LOAD type=SYSCALL msg=audit(1744637015.134:18969): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001bfad0 a2=90 a3=0 items=0 ppid=93322 pid=93333 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637015.134:18969): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6164633436383437306432393932353238383537656162333662363235 type=BPF msg=audit(1744637015.134:18970): prog-id=0 op=UNLOAD type=BPF msg=audit(1744637015.134:18971): prog-id=653 op=LOAD type=SYSCALL msg=audit(1744637015.134:18971): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001bfc48 a2=90 a3=0 items=0 ppid=93322 pid=93333 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637015.134:18971): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6164633436383437306432393932353238383537656162333662363235 type=BPF msg=audit(1744637015.134:18972): prog-id=654 op=LOAD type=SYSCALL msg=audit(1744637015.134:18972): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001bf9d8 a2=90 a3=0 items=0 ppid=93322 pid=93333 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637015.134:18972): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6164633436383437306432393932353238383537656162333662363235 type=BPF msg=audit(1744637015.134:18973): prog-id=0 op=UNLOAD type=BPF msg=audit(1744637015.134:18974): prog-id=0 op=UNLOAD type=BPF msg=audit(1744637015.134:18975): prog-id=655 op=LOAD type=SYSCALL msg=audit(1744637015.134:18975): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001bfeb0 a2=90 a3=0 items=0 ppid=93322 pid=93333 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637015.134:18975): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6164633436383437306432393932353238383537656162333662363235 type=BPF msg=audit(1744637016.364:18976): prog-id=656 op=LOAD type=BPF msg=audit(1744637016.365:18977): prog-id=657 op=LOAD type=SYSCALL msg=audit(1744637016.365:18977): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c00011fad0 a2=90 a3=0 items=0 ppid=93322 pid=93366 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637016.365:18977): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6135303239323365393237376539383035323864663532363138373630 type=BPF msg=audit(1744637016.365:18978): prog-id=0 op=UNLOAD type=BPF msg=audit(1744637016.365:18979): prog-id=658 op=LOAD type=SYSCALL msg=audit(1744637016.365:18979): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c00011fc48 a2=90 a3=0 items=0 ppid=93322 pid=93366 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637016.365:18979): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6135303239323365393237376539383035323864663532363138373630 type=BPF msg=audit(1744637016.365:18980): prog-id=659 op=LOAD type=SYSCALL msg=audit(1744637016.365:18980): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00011f9d8 a2=90 a3=0 items=0 ppid=93322 pid=93366 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637016.365:18980): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6135303239323365393237376539383035323864663532363138373630 type=BPF msg=audit(1744637016.365:18981): prog-id=0 op=UNLOAD type=BPF msg=audit(1744637016.365:18982): prog-id=0 op=UNLOAD type=BPF msg=audit(1744637016.365:18983): prog-id=660 op=LOAD type=SYSCALL msg=audit(1744637016.365:18983): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c00011feb0 a2=90 a3=0 items=0 ppid=93322 pid=93366 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637016.365:18983): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6135303239323365393237376539383035323864663532363138373630 type=SERVICE_STOP msg=audit(1744637019.864:18984): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbus-:1.2-org.fedoraproject.SetroubleshootPrivileged@5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1744637019.899:18985): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=setroubleshootd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1744637035.784:18986): prog-id=661 op=LOAD type=BPF msg=audit(1744637035.785:18987): prog-id=662 op=LOAD type=SYSCALL msg=audit(1744637035.785:18987): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000199ad0 a2=90 a3=0 items=0 ppid=93783 pid=93793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637035.785:18987): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6662636165336634663062653662323964376134663066363266623061 type=BPF msg=audit(1744637035.785:18988): prog-id=0 op=UNLOAD type=BPF msg=audit(1744637035.785:18989): prog-id=663 op=LOAD type=SYSCALL msg=audit(1744637035.785:18989): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000199c48 a2=90 a3=0 items=0 ppid=93783 pid=93793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637035.785:18989): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6662636165336634663062653662323964376134663066363266623061 type=BPF msg=audit(1744637035.785:18990): prog-id=664 op=LOAD type=SYSCALL msg=audit(1744637035.785:18990): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001999d8 a2=90 a3=0 items=0 ppid=93783 pid=93793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637035.785:18990): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6662636165336634663062653662323964376134663066363266623061 type=BPF msg=audit(1744637035.785:18991): prog-id=0 op=UNLOAD type=BPF msg=audit(1744637035.785:18992): prog-id=0 op=UNLOAD type=BPF msg=audit(1744637035.785:18993): prog-id=665 op=LOAD type=SYSCALL msg=audit(1744637035.785:18993): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000199eb0 a2=90 a3=0 items=0 ppid=93783 pid=93793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637035.785:18993): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6662636165336634663062653662323964376134663066363266623061 type=BPF msg=audit(1744637035.830:18994): prog-id=666 op=LOAD type=BPF msg=audit(1744637035.831:18995): prog-id=667 op=LOAD type=SYSCALL msg=audit(1744637035.831:18995): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001bfad0 a2=90 a3=0 items=0 ppid=93820 pid=93832 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637035.831:18995): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6334383037613765663630326631373232383563386361396465653264 type=BPF msg=audit(1744637035.831:18996): prog-id=0 op=UNLOAD type=BPF msg=audit(1744637035.831:18997): prog-id=668 op=LOAD type=SYSCALL msg=audit(1744637035.831:18997): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001bfc48 a2=90 a3=0 items=0 ppid=93820 pid=93832 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637035.831:18997): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6334383037613765663630326631373232383563386361396465653264 type=BPF msg=audit(1744637035.831:18998): prog-id=669 op=LOAD type=SYSCALL msg=audit(1744637035.831:18998): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001bf9d8 a2=90 a3=0 items=0 ppid=93820 pid=93832 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637035.831:18998): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6334383037613765663630326631373232383563386361396465653264 type=BPF msg=audit(1744637035.831:18999): prog-id=0 op=UNLOAD type=BPF msg=audit(1744637035.831:19000): prog-id=0 op=UNLOAD type=BPF msg=audit(1744637035.831:19001): prog-id=670 op=LOAD type=SYSCALL msg=audit(1744637035.831:19001): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001bfeb0 a2=90 a3=0 items=0 ppid=93820 pid=93832 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637035.831:19001): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6334383037613765663630326631373232383563386361396465653264 type=BPF msg=audit(1744637035.939:19002): prog-id=671 op=LOAD type=BPF msg=audit(1744637035.940:19003): prog-id=672 op=LOAD type=SYSCALL msg=audit(1744637035.940:19003): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000195ad0 a2=90 a3=0 items=0 ppid=93783 pid=93872 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637035.940:19003): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3939616331386661396336656161383661323835623930653034373438 type=BPF msg=audit(1744637035.940:19004): prog-id=0 op=UNLOAD type=BPF msg=audit(1744637035.940:19005): prog-id=673 op=LOAD type=SYSCALL msg=audit(1744637035.940:19005): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000195c48 a2=90 a3=0 items=0 ppid=93783 pid=93872 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637035.940:19005): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3939616331386661396336656161383661323835623930653034373438 type=BPF msg=audit(1744637035.940:19006): prog-id=674 op=LOAD type=SYSCALL msg=audit(1744637035.940:19006): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001959d8 a2=90 a3=0 items=0 ppid=93783 pid=93872 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637035.940:19006): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3939616331386661396336656161383661323835623930653034373438 type=BPF msg=audit(1744637035.940:19007): prog-id=0 op=UNLOAD type=BPF msg=audit(1744637035.940:19008): prog-id=0 op=UNLOAD type=BPF msg=audit(1744637035.940:19009): prog-id=675 op=LOAD type=SYSCALL msg=audit(1744637035.940:19009): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000195eb0 a2=90 a3=0 items=0 ppid=93783 pid=93872 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637035.940:19009): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3939616331386661396336656161383661323835623930653034373438 type=BPF msg=audit(1744637035.969:19010): prog-id=676 op=LOAD type=BPF msg=audit(1744637035.969:19011): prog-id=677 op=LOAD type=SYSCALL msg=audit(1744637035.969:19011): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000233ad0 a2=90 a3=0 items=0 ppid=93820 pid=93898 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637035.969:19011): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3561333937336532353032316237613837666633666435663538316135 type=BPF msg=audit(1744637035.970:19012): prog-id=0 op=UNLOAD type=BPF msg=audit(1744637035.970:19013): prog-id=678 op=LOAD type=SYSCALL msg=audit(1744637035.970:19013): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000233c48 a2=90 a3=0 items=0 ppid=93820 pid=93898 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637035.970:19013): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3561333937336532353032316237613837666633666435663538316135 type=BPF msg=audit(1744637035.970:19014): prog-id=679 op=LOAD type=SYSCALL msg=audit(1744637035.970:19014): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0002339d8 a2=90 a3=0 items=0 ppid=93820 pid=93898 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637035.970:19014): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3561333937336532353032316237613837666633666435663538316135 type=BPF msg=audit(1744637035.970:19015): prog-id=0 op=UNLOAD type=BPF msg=audit(1744637035.970:19016): prog-id=0 op=UNLOAD type=BPF msg=audit(1744637035.970:19017): prog-id=680 op=LOAD type=SYSCALL msg=audit(1744637035.970:19017): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000233eb0 a2=90 a3=0 items=0 ppid=93820 pid=93898 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637035.970:19017): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3561333937336532353032316237613837666633666435663538316135 type=BPF msg=audit(1744637036.146:19018): prog-id=681 op=LOAD type=BPF msg=audit(1744637036.147:19019): prog-id=682 op=LOAD type=SYSCALL msg=audit(1744637036.147:19019): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000199ad0 a2=90 a3=0 items=0 ppid=93938 pid=93950 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637036.147:19019): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239346136386131333136663238353835643061343039623863643239 type=BPF msg=audit(1744637036.147:19020): prog-id=0 op=UNLOAD type=BPF msg=audit(1744637036.147:19021): prog-id=683 op=LOAD type=SYSCALL msg=audit(1744637036.147:19021): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000199c48 a2=90 a3=0 items=0 ppid=93938 pid=93950 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637036.147:19021): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239346136386131333136663238353835643061343039623863643239 type=BPF msg=audit(1744637036.147:19022): prog-id=684 op=LOAD type=SYSCALL msg=audit(1744637036.147:19022): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001999d8 a2=90 a3=0 items=0 ppid=93938 pid=93950 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637036.147:19022): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239346136386131333136663238353835643061343039623863643239 type=BPF msg=audit(1744637036.147:19023): prog-id=0 op=UNLOAD type=BPF msg=audit(1744637036.147:19024): prog-id=0 op=UNLOAD type=BPF msg=audit(1744637036.147:19025): prog-id=685 op=LOAD type=SYSCALL msg=audit(1744637036.147:19025): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000199eb0 a2=90 a3=0 items=0 ppid=93938 pid=93950 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637036.147:19025): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239346136386131333136663238353835643061343039623863643239 type=BPF msg=audit(1744637036.292:19026): prog-id=686 op=LOAD type=BPF msg=audit(1744637036.293:19027): prog-id=687 op=LOAD type=SYSCALL msg=audit(1744637036.293:19027): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001bdad0 a2=90 a3=0 items=0 ppid=93938 pid=93984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637036.293:19027): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465393166316634656434386365396239363863303261386662323936 type=BPF msg=audit(1744637036.293:19028): prog-id=0 op=UNLOAD type=BPF msg=audit(1744637036.293:19029): prog-id=688 op=LOAD type=SYSCALL msg=audit(1744637036.293:19029): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001bdc48 a2=90 a3=0 items=0 ppid=93938 pid=93984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637036.293:19029): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465393166316634656434386365396239363863303261386662323936 type=BPF msg=audit(1744637036.293:19030): prog-id=689 op=LOAD type=SYSCALL msg=audit(1744637036.293:19030): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001bd9d8 a2=90 a3=0 items=0 ppid=93938 pid=93984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637036.293:19030): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465393166316634656434386365396239363863303261386662323936 type=BPF msg=audit(1744637036.293:19031): prog-id=0 op=UNLOAD type=BPF msg=audit(1744637036.293:19032): prog-id=0 op=UNLOAD type=BPF msg=audit(1744637036.293:19033): prog-id=690 op=LOAD type=SYSCALL msg=audit(1744637036.293:19033): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001bdeb0 a2=90 a3=0 items=0 ppid=93938 pid=93984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637036.293:19033): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465393166316634656434386365396239363863303261386662323936 type=BPF msg=audit(1744637036.401:19034): prog-id=691 op=LOAD type=BPF msg=audit(1744637036.402:19035): prog-id=692 op=LOAD type=SYSCALL msg=audit(1744637036.402:19035): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000219ad0 a2=90 a3=0 items=0 ppid=94019 pid=94031 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637036.402:19035): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3763363962393231326336653466323735343636396236326565303034 type=BPF msg=audit(1744637036.402:19036): prog-id=0 op=UNLOAD type=BPF msg=audit(1744637036.402:19037): prog-id=693 op=LOAD type=SYSCALL msg=audit(1744637036.402:19037): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000219c48 a2=90 a3=0 items=0 ppid=94019 pid=94031 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637036.402:19037): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3763363962393231326336653466323735343636396236326565303034 type=BPF msg=audit(1744637036.402:19038): prog-id=694 op=LOAD type=SYSCALL msg=audit(1744637036.402:19038): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0002199d8 a2=90 a3=0 items=0 ppid=94019 pid=94031 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637036.402:19038): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3763363962393231326336653466323735343636396236326565303034 type=BPF msg=audit(1744637036.403:19039): prog-id=0 op=UNLOAD type=BPF msg=audit(1744637036.403:19040): prog-id=0 op=UNLOAD type=BPF msg=audit(1744637036.403:19041): prog-id=695 op=LOAD type=SYSCALL msg=audit(1744637036.403:19041): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000219eb0 a2=90 a3=0 items=0 ppid=94019 pid=94031 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637036.403:19041): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3763363962393231326336653466323735343636396236326565303034 type=BPF msg=audit(1744637036.550:19042): prog-id=696 op=LOAD type=BPF msg=audit(1744637036.550:19043): prog-id=697 op=LOAD type=SYSCALL msg=audit(1744637036.550:19043): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000195ad0 a2=90 a3=0 items=0 ppid=94019 pid=94065 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637036.550:19043): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3166646163303164303933386538363130363939343931393163346363 type=BPF msg=audit(1744637036.551:19044): prog-id=0 op=UNLOAD type=BPF msg=audit(1744637036.551:19045): prog-id=698 op=LOAD type=SYSCALL msg=audit(1744637036.551:19045): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000195c48 a2=90 a3=0 items=0 ppid=94019 pid=94065 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637036.551:19045): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3166646163303164303933386538363130363939343931393163346363 type=BPF msg=audit(1744637036.551:19046): prog-id=699 op=LOAD type=SYSCALL msg=audit(1744637036.551:19046): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001959d8 a2=90 a3=0 items=0 ppid=94019 pid=94065 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637036.551:19046): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3166646163303164303933386538363130363939343931393163346363 type=BPF msg=audit(1744637036.551:19047): prog-id=0 op=UNLOAD type=BPF msg=audit(1744637036.551:19048): prog-id=0 op=UNLOAD type=BPF msg=audit(1744637036.551:19049): prog-id=700 op=LOAD type=SYSCALL msg=audit(1744637036.551:19049): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000195eb0 a2=90 a3=0 items=0 ppid=94019 pid=94065 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637036.551:19049): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3166646163303164303933386538363130363939343931393163346363 type=USER_LOGIN msg=audit(1744637040.651:19050): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744637040.651:19051): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744637040.655:19052): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=94138 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=BPF msg=audit(1744637040.703:19053): prog-id=701 op=LOAD type=BPF msg=audit(1744637040.703:19054): prog-id=702 op=LOAD type=SERVICE_START msg=audit(1744637040.987:19055): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1744637041.011:19056): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744637041.011:19057): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744637041.053:19058): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744637041.053:19059): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744637041.055:19060): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=94173 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744637041.108:19061): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744637041.108:19062): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744637041.150:19063): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744637041.150:19064): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744637041.152:19065): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=94207 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744637041.202:19066): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744637041.202:19067): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=NETFILTER_CFG msg=audit(1744637041.513:19068): table=filter family=2 entries=51 op=xt_replace pid=94349 subj=system_u:system_r:spc_t:s0 comm="iptables-restor" type=SYSCALL msg=audit(1744637041.513:19068): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=560fb5db69e0 items=0 ppid=25833 pid=94349 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637041.513:19068): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 type=NETFILTER_CFG msg=audit(1744637041.516:19069): table=nat family=2 entries=103 op=xt_replace pid=94349 subj=system_u:system_r:spc_t:s0 comm="iptables-restor" type=SYSCALL msg=audit(1744637041.516:19069): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=560fb5dc7700 items=0 ppid=25833 pid=94349 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637041.516:19069): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 type=NETFILTER_CFG msg=audit(1744637041.563:19070): table=filter family=2 entries=52 op=xt_replace pid=94372 subj=system_u:system_r:spc_t:s0 comm="iptables-restor" type=SYSCALL msg=audit(1744637041.563:19070): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=5565603ff770 items=0 ppid=25833 pid=94372 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637041.563:19070): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 type=NETFILTER_CFG msg=audit(1744637041.565:19071): table=nat family=2 entries=103 op=xt_replace pid=94372 subj=system_u:system_r:spc_t:s0 comm="iptables-restor" type=SYSCALL msg=audit(1744637041.565:19071): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=556560411f40 items=0 ppid=25833 pid=94372 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637041.565:19071): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 type=SERVICE_STOP msg=audit(1744637071.212:19072): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1744637071.247:19073): prog-id=0 op=UNLOAD type=BPF msg=audit(1744637071.247:19074): prog-id=0 op=UNLOAD type=SERVICE_STOP msg=audit(1744637185.904:19075): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sssd-kcm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1744637232.196:19076): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744637232.196:19077): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744637232.198:19078): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=97099 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=BPF msg=audit(1744637232.240:19079): prog-id=703 op=LOAD type=BPF msg=audit(1744637232.240:19080): prog-id=704 op=LOAD type=SERVICE_START msg=audit(1744637232.501:19081): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1744637232.529:19082): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744637232.529:19083): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744637232.572:19084): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744637232.573:19085): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744637232.574:19086): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=97133 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744637232.630:19087): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744637232.630:19088): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744637232.672:19089): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744637232.672:19090): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744637232.674:19091): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=97167 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744637232.727:19092): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744637232.727:19093): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=BPF msg=audit(1744637232.851:19094): prog-id=0 op=UNLOAD type=BPF msg=audit(1744637232.851:19095): prog-id=0 op=UNLOAD type=BPF msg=audit(1744637232.882:19096): prog-id=0 op=UNLOAD type=BPF msg=audit(1744637232.882:19097): prog-id=0 op=UNLOAD type=BPF msg=audit(1744637232.894:19098): prog-id=0 op=UNLOAD type=BPF msg=audit(1744637232.894:19099): prog-id=0 op=UNLOAD type=NETFILTER_CFG msg=audit(1744637232.907:19100): table=filter family=2 entries=51 op=xt_replace pid=97302 subj=system_u:system_r:spc_t:s0 comm="iptables-restor" type=SYSCALL msg=audit(1744637232.907:19100): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55d4c6024360 items=0 ppid=25833 pid=97302 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637232.907:19100): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 type=NETFILTER_CFG msg=audit(1744637232.909:19101): table=nat family=2 entries=117 op=xt_replace pid=97302 subj=system_u:system_r:spc_t:s0 comm="iptables-restor" type=SYSCALL msg=audit(1744637232.909:19101): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55d4c6037b00 items=0 ppid=25833 pid=97302 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637232.909:19101): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 type=BPF msg=audit(1744637232.934:19102): prog-id=0 op=UNLOAD type=BPF msg=audit(1744637232.934:19103): prog-id=0 op=UNLOAD type=BPF msg=audit(1744637233.041:19104): prog-id=0 op=UNLOAD type=BPF msg=audit(1744637233.041:19105): prog-id=0 op=UNLOAD type=BPF msg=audit(1744637233.046:19106): prog-id=0 op=UNLOAD type=BPF msg=audit(1744637233.046:19107): prog-id=0 op=UNLOAD type=BPF msg=audit(1744637233.131:19108): prog-id=0 op=UNLOAD type=BPF msg=audit(1744637233.131:19109): prog-id=0 op=UNLOAD type=BPF msg=audit(1744637233.243:19110): prog-id=0 op=UNLOAD type=BPF msg=audit(1744637233.243:19111): prog-id=0 op=UNLOAD type=NETFILTER_CFG msg=audit(1744637233.846:19112): table=filter family=2 entries=51 op=xt_replace pid=97626 subj=system_u:system_r:spc_t:s0 comm="iptables-restor" type=SYSCALL msg=audit(1744637233.846:19112): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55656fe1c9e0 items=0 ppid=25833 pid=97626 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637233.846:19112): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 type=NETFILTER_CFG msg=audit(1744637233.848:19113): table=nat family=2 entries=112 op=xt_replace pid=97626 subj=system_u:system_r:spc_t:s0 comm="iptables-restor" type=SYSCALL msg=audit(1744637233.848:19113): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55656fe2e360 items=0 ppid=25833 pid=97626 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637233.848:19113): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 type=NETFILTER_CFG msg=audit(1744637234.476:19114): table=filter family=2 entries=52 op=xt_replace pid=97648 subj=system_u:system_r:spc_t:s0 comm="iptables-restor" type=SYSCALL msg=audit(1744637234.476:19114): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55fdf24d4ac0 items=0 ppid=25833 pid=97648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637234.476:19114): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 type=NETFILTER_CFG msg=audit(1744637234.478:19115): table=nat family=2 entries=103 op=xt_replace pid=97648 subj=system_u:system_r:spc_t:s0 comm="iptables-restor" type=SYSCALL msg=audit(1744637234.478:19115): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55fdf24e56b0 items=0 ppid=25833 pid=97648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637234.478:19115): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 type=NETFILTER_CFG msg=audit(1744637235.037:19116): table=filter family=2 entries=52 op=xt_replace pid=97671 subj=system_u:system_r:spc_t:s0 comm="iptables-restor" type=SYSCALL msg=audit(1744637235.037:19116): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55b7771adac0 items=0 ppid=25833 pid=97671 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637235.037:19116): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 type=NETFILTER_CFG msg=audit(1744637235.039:19117): table=nat family=2 entries=103 op=xt_replace pid=97671 subj=system_u:system_r:spc_t:s0 comm="iptables-restor" type=SYSCALL msg=audit(1744637235.039:19117): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55b7771be6b0 items=0 ppid=25833 pid=97671 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637235.039:19117): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 type=NETFILTER_CFG msg=audit(1744637236.071:19118): table=filter family=2 entries=52 op=xt_replace pid=97718 subj=system_u:system_r:spc_t:s0 comm="iptables-restor" type=SYSCALL msg=audit(1744637236.071:19118): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=563bcd9ebac0 items=0 ppid=25833 pid=97718 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637236.071:19118): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 type=NETFILTER_CFG msg=audit(1744637236.072:19119): table=nat family=2 entries=103 op=xt_replace pid=97718 subj=system_u:system_r:spc_t:s0 comm="iptables-restor" type=SYSCALL msg=audit(1744637236.072:19119): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=563bcd9fc7d0 items=0 ppid=25833 pid=97718 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637236.072:19119): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 type=SERVICE_STOP msg=audit(1744637262.733:19120): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1744637262.766:19121): prog-id=0 op=UNLOAD type=BPF msg=audit(1744637262.766:19122): prog-id=0 op=UNLOAD type=BPF msg=audit(1744637262.861:19123): prog-id=0 op=UNLOAD type=BPF msg=audit(1744637262.861:19124): prog-id=0 op=UNLOAD type=BPF msg=audit(1744637262.874:19125): prog-id=0 op=UNLOAD type=BPF msg=audit(1744637262.874:19126): prog-id=0 op=UNLOAD type=BPF msg=audit(1744637262.920:19127): prog-id=0 op=UNLOAD type=BPF msg=audit(1744637262.920:19128): prog-id=0 op=UNLOAD type=BPF msg=audit(1744637262.936:19129): prog-id=0 op=UNLOAD type=BPF msg=audit(1744637262.936:19130): prog-id=0 op=UNLOAD type=BPF msg=audit(1744637262.936:19131): prog-id=0 op=UNLOAD type=BPF msg=audit(1744637262.936:19132): prog-id=0 op=UNLOAD type=BPF msg=audit(1744637262.954:19133): prog-id=0 op=UNLOAD type=BPF msg=audit(1744637262.954:19134): prog-id=0 op=UNLOAD type=BPF msg=audit(1744637263.022:19135): prog-id=0 op=UNLOAD type=BPF msg=audit(1744637263.022:19136): prog-id=0 op=UNLOAD type=BPF msg=audit(1744637263.044:19137): prog-id=0 op=UNLOAD type=BPF msg=audit(1744637263.044:19138): prog-id=0 op=UNLOAD type=NETFILTER_CFG msg=audit(1744637289.343:19139): table=filter family=2 entries=52 op=xt_replace pid=98770 subj=system_u:system_r:spc_t:s0 comm="iptables-restor" type=SYSCALL msg=audit(1744637289.343:19139): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55678e173ac0 items=0 ppid=25833 pid=98770 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637289.343:19139): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 type=NETFILTER_CFG msg=audit(1744637289.345:19140): table=nat family=2 entries=103 op=xt_replace pid=98770 subj=system_u:system_r:spc_t:s0 comm="iptables-restor" type=SYSCALL msg=audit(1744637289.345:19140): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55678e1845e0 items=0 ppid=25833 pid=98770 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637289.345:19140): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 type=NETFILTER_CFG msg=audit(1744637289.521:19141): table=filter family=2 entries=52 op=xt_replace pid=98792 subj=system_u:system_r:spc_t:s0 comm="iptables-restor" type=SYSCALL msg=audit(1744637289.521:19141): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=558370263770 items=0 ppid=25833 pid=98792 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637289.521:19141): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 type=NETFILTER_CFG msg=audit(1744637289.522:19142): table=nat family=2 entries=103 op=xt_replace pid=98792 subj=system_u:system_r:spc_t:s0 comm="iptables-restor" type=SYSCALL msg=audit(1744637289.522:19142): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=558370274510 items=0 ppid=25833 pid=98792 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637289.522:19142): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 type=CRYPTO_KEY_USER msg=audit(1744637290.285:19143): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=89512 suid=1000 rport=47176 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744637290.286:19144): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=89512 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744637290.289:19145): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" type=CRED_DISP msg=audit(1744637290.289:19146): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744637290.290:19147): pid=89509 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=89509 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=CRYPTO_KEY_USER msg=audit(1744637298.660:19148): pid=98814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=98814 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1744637298.662:19149): pid=98811 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=98814 suid=74 rport=55592 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1744637298.662:19150): pid=98811 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=98814 suid=74 rport=55592 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1744637298.724:19151): pid=98811 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744637298.725:19152): pid=98811 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:70:6d:53:7b:b9:b1:0c:0b:97:46:57:0a:90:24:61:0d:60:dd:24:ba:9a:35:b7:5d:bd:60:94:bc:89:4a:f4:2f exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1744637298.755:19153): pid=98811 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744637298.756:19154): pid=98811 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=98814 suid=74 rport=55592 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1744637298.758:19155): pid=98811 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1744637298.758:19156): pid=98811 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=46 res=1UID="root" OLD-AUID="unset" AUID="rocky" type=SYSCALL msg=audit(1744637298.758:19156): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffff3087720 a2=4 a3=3e8 items=0 ppid=12346 pid=98811 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=46 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637298.758:19156): proctitle=737368643A20726F636B79205B707269765D type=USER_ROLE_CHANGE msg=audit(1744637298.759:19157): pid=98811 uid=0 auid=1000 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_START msg=audit(1744637298.776:19158): pid=98811 uid=0 auid=1000 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744637298.777:19159): pid=98816 uid=0 auid=1000 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=98816 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=CRED_ACQ msg=audit(1744637298.778:19160): pid=98816 uid=0 auid=1000 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_LOGIN msg=audit(1744637298.820:19161): pid=98811 uid=0 auid=1000 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744637298.820:19162): pid=98811 uid=0 auid=1000 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744637298.822:19163): pid=98811 uid=0 auid=1000 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=98817 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744637298.881:19164): pid=98817 uid=1000 auid=1000 ses=46 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744637298.882:19165): pid=98817 uid=1000 auid=1000 ses=46 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F62617368202D6C202D6320686F73746E616D65 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744637298.882:19166): pid=98817 uid=1000 auid=1000 ses=46 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744637298.885:19167): pid=98817 uid=1000 auid=1000 ses=46 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=BPF msg=audit(1744637298.905:19168): prog-id=705 op=LOAD type=BPF msg=audit(1744637298.905:19169): prog-id=706 op=LOAD type=SERVICE_START msg=audit(1744637299.118:19170): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1744637299.140:19171): pid=98817 uid=1000 auid=1000 ses=46 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744637299.140:19172): pid=98817 uid=1000 auid=1000 ses=46 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744637299.142:19173): pid=98811 uid=0 auid=1000 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744637299.142:19174): pid=98811 uid=0 auid=1000 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744637299.184:19175): pid=98811 uid=0 auid=1000 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744637299.184:19176): pid=98811 uid=0 auid=1000 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744637299.186:19177): pid=98811 uid=0 auid=1000 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=98856 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744637299.240:19178): pid=98856 uid=1000 auid=1000 ses=46 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744637299.240:19179): pid=98856 uid=1000 auid=1000 ses=46 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F62617368202D6C202D6320686F73746E616D65202D66 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744637299.240:19180): pid=98856 uid=1000 auid=1000 ses=46 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744637299.242:19181): pid=98856 uid=1000 auid=1000 ses=46 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744637299.273:19182): pid=98856 uid=1000 auid=1000 ses=46 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744637299.274:19183): pid=98856 uid=1000 auid=1000 ses=46 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744637299.275:19184): pid=98811 uid=0 auid=1000 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744637299.275:19185): pid=98811 uid=0 auid=1000 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744637299.318:19186): pid=98811 uid=0 auid=1000 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744637299.319:19187): pid=98811 uid=0 auid=1000 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744637299.321:19188): pid=98811 uid=0 auid=1000 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=98894 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744637299.374:19189): pid=98894 uid=1000 auid=1000 ses=46 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744637299.375:19190): pid=98894 uid=1000 auid=1000 ses=46 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F62617368202D6C202D6320646F636B657220707320323E2F6465762F6E756C6C20207C2067726570202D7620222F70617573655C7C2F7573722F62696E2F706F645C7C6E6F76615F6170695F5C7C636F6E747261696C2E2A696E69745C7C696E69742E2A636F6E747261696C5C7C70726F766973696F6E65725C7C706C6163656D656E742220207C2061776B20277B7072696E7420244E467D27 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744637299.375:19191): pid=98894 uid=1000 auid=1000 ses=46 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744637299.376:19192): pid=98894 uid=1000 auid=1000 ses=46 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744637299.453:19193): pid=98894 uid=1000 auid=1000 ses=46 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744637299.454:19194): pid=98894 uid=1000 auid=1000 ses=46 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744637299.456:19195): pid=98811 uid=0 auid=1000 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744637299.456:19196): pid=98811 uid=0 auid=1000 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744637299.498:19197): pid=98811 uid=0 auid=1000 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744637299.498:19198): pid=98811 uid=0 auid=1000 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744637299.500:19199): pid=98811 uid=0 auid=1000 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=98943 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744637299.563:19200): pid=98943 uid=1000 auid=1000 ses=46 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744637299.563:19201): pid=98943 uid=1000 auid=1000 ses=46 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F62617368202D6C202D6320697020616464722073686F77207C20677265702027696E6574202E2A2F2E2A206272642027207C2061776B20277B7072696E742024327D27 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744637299.564:19202): pid=98943 uid=1000 auid=1000 ses=46 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744637299.568:19203): pid=98943 uid=1000 auid=1000 ses=46 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744637299.608:19204): pid=98943 uid=1000 auid=1000 ses=46 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744637299.608:19205): pid=98943 uid=1000 auid=1000 ses=46 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744637299.610:19206): pid=98811 uid=0 auid=1000 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744637299.610:19207): pid=98811 uid=0 auid=1000 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744637299.653:19208): pid=98811 uid=0 auid=1000 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744637299.653:19209): pid=98811 uid=0 auid=1000 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744637299.655:19210): pid=98811 uid=0 auid=1000 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=98984 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744637299.709:19211): pid=98984 uid=1000 auid=1000 ses=46 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744637299.710:19212): pid=98984 uid=1000 auid=1000 ses=46 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F62617368202D6C202D6320676574656E7420686F7374732031302E302E302E3338207C2068656164202D6E2031207C2061776B20277B7072696E742024327D27 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744637299.710:19213): pid=98984 uid=1000 auid=1000 ses=46 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744637299.712:19214): pid=98984 uid=1000 auid=1000 ses=46 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744637299.749:19215): pid=98984 uid=1000 auid=1000 ses=46 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744637299.749:19216): pid=98984 uid=1000 auid=1000 ses=46 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744637299.750:19217): pid=98811 uid=0 auid=1000 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744637299.751:19218): pid=98811 uid=0 auid=1000 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744637299.793:19219): pid=98811 uid=0 auid=1000 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744637299.793:19220): pid=98811 uid=0 auid=1000 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744637299.795:19221): pid=98811 uid=0 auid=1000 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=99025 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744637299.852:19222): pid=99025 uid=1000 auid=1000 ses=46 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744637299.852:19223): pid=99025 uid=1000 auid=1000 ses=46 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F62617368202D6C202D6320697020616464722073686F77206465762076686F737430207C20677265702027696E6574202E2A2F2E2A206272642027207C2061776B20277B7072696E742024327D27 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744637299.853:19224): pid=99025 uid=1000 auid=1000 ses=46 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744637299.855:19225): pid=99025 uid=1000 auid=1000 ses=46 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744637299.893:19226): pid=99025 uid=1000 auid=1000 ses=46 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744637299.893:19227): pid=99025 uid=1000 auid=1000 ses=46 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744637299.894:19228): pid=98811 uid=0 auid=1000 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744637299.894:19229): pid=98811 uid=0 auid=1000 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744637299.937:19230): pid=98811 uid=0 auid=1000 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744637299.937:19231): pid=98811 uid=0 auid=1000 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744637299.939:19232): pid=98811 uid=0 auid=1000 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=99066 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744637299.992:19233): pid=98811 uid=0 auid=1000 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744637299.992:19234): pid=98811 uid=0 auid=1000 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744637300.034:19235): pid=98811 uid=0 auid=1000 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744637300.034:19236): pid=98811 uid=0 auid=1000 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744637300.036:19237): pid=98811 uid=0 auid=1000 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=99102 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744637300.089:19238): pid=98811 uid=0 auid=1000 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744637300.089:19239): pid=98811 uid=0 auid=1000 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744637300.208:19240): pid=98811 uid=0 auid=1000 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744637300.208:19241): pid=98811 uid=0 auid=1000 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744637300.209:19242): pid=98811 uid=0 auid=1000 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=99143 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744637300.261:19243): pid=99143 uid=1000 auid=1000 ses=46 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744637300.261:19244): pid=99143 uid=1000 auid=1000 ses=46 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F62617368202D6C202D63200A2020202020202020202020206966205B202D66202F6574632F6C73622D72656C65617365205D3B207468656E2028636174202F6574632F6C73622D72656C65617365207C206772657020444953545249425F4445534352495054494F4E207C20637574202D6420223D22202D663220290A202020202020202020202020656C73650A20202020202020202020202020202020636174202F6574632F7265646861742D72656C65617365207C2073656420732F5C2846696E616C5C292F2F0A2020202020202020202020206669 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744637300.262:19245): pid=99143 uid=1000 auid=1000 ses=46 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744637300.263:19246): pid=99143 uid=1000 auid=1000 ses=46 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744637300.294:19247): pid=99143 uid=1000 auid=1000 ses=46 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744637300.294:19248): pid=99143 uid=1000 auid=1000 ses=46 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744637300.295:19249): pid=98811 uid=0 auid=1000 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744637300.296:19250): pid=98811 uid=0 auid=1000 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744637300.338:19251): pid=98811 uid=0 auid=1000 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744637300.338:19252): pid=98811 uid=0 auid=1000 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744637300.340:19253): pid=98811 uid=0 auid=1000 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=99184 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744637300.389:19254): pid=98811 uid=0 auid=1000 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744637300.389:19255): pid=98811 uid=0 auid=1000 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744637300.432:19256): pid=98811 uid=0 auid=1000 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744637300.432:19257): pid=98811 uid=0 auid=1000 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744637300.434:19258): pid=98811 uid=0 auid=1000 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=99221 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744637300.489:19259): pid=98811 uid=0 auid=1000 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744637300.489:19260): pid=98811 uid=0 auid=1000 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744637300.590:19261): pid=98811 uid=0 auid=1000 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=98816 suid=1000 rport=55592 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744637300.592:19262): pid=98811 uid=0 auid=1000 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=98816 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744637300.594:19263): pid=98811 uid=0 auid=1000 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" type=CRED_DISP msg=audit(1744637300.594:19264): pid=98811 uid=0 auid=1000 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744637300.594:19265): pid=98811 uid=0 auid=1000 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=98811 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=CRYPTO_KEY_USER msg=audit(1744637302.461:19266): pid=99315 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=99315 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1744637302.462:19267): pid=99312 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=99315 suid=74 rport=55604 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1744637302.462:19268): pid=99312 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=99315 suid=74 rport=55604 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1744637302.521:19269): pid=99312 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744637302.522:19270): pid=99312 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:70:6d:53:7b:b9:b1:0c:0b:97:46:57:0a:90:24:61:0d:60:dd:24:ba:9a:35:b7:5d:bd:60:94:bc:89:4a:f4:2f exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1744637302.551:19271): pid=99312 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744637302.552:19272): pid=99312 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=99315 suid=74 rport=55604 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1744637302.554:19273): pid=99312 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1744637302.554:19274): pid=99312 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=47 res=1UID="root" OLD-AUID="unset" AUID="rocky" type=SYSCALL msg=audit(1744637302.554:19274): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffd41f0ec70 a2=4 a3=3e8 items=0 ppid=12346 pid=99312 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=47 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637302.554:19274): proctitle=737368643A20726F636B79205B707269765D type=USER_ROLE_CHANGE msg=audit(1744637302.555:19275): pid=99312 uid=0 auid=1000 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_START msg=audit(1744637302.573:19276): pid=99312 uid=0 auid=1000 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744637302.574:19277): pid=99317 uid=0 auid=1000 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=99317 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=CRED_ACQ msg=audit(1744637302.575:19278): pid=99317 uid=0 auid=1000 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_LOGIN msg=audit(1744637302.619:19279): pid=99312 uid=0 auid=1000 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744637302.619:19280): pid=99312 uid=0 auid=1000 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744637302.621:19281): pid=99312 uid=0 auid=1000 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=99318 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744637302.675:19282): pid=99318 uid=1000 auid=1000 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744637302.675:19283): pid=99318 uid=1000 auid=1000 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F62617368202D6C202D6320686F73746E616D65 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744637302.676:19284): pid=99318 uid=1000 auid=1000 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744637302.678:19285): pid=99318 uid=1000 auid=1000 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744637302.710:19286): pid=99318 uid=1000 auid=1000 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744637302.710:19287): pid=99318 uid=1000 auid=1000 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744637302.712:19288): pid=99312 uid=0 auid=1000 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744637302.712:19289): pid=99312 uid=0 auid=1000 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744637302.754:19290): pid=99312 uid=0 auid=1000 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744637302.754:19291): pid=99312 uid=0 auid=1000 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744637302.756:19292): pid=99312 uid=0 auid=1000 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=99356 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744637302.816:19293): pid=99356 uid=1000 auid=1000 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744637302.816:19294): pid=99356 uid=1000 auid=1000 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F62617368202D6C202D6320686F73746E616D65202D66 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744637302.816:19295): pid=99356 uid=1000 auid=1000 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744637302.825:19296): pid=99356 uid=1000 auid=1000 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744637302.864:19297): pid=99356 uid=1000 auid=1000 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744637302.864:19298): pid=99356 uid=1000 auid=1000 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744637302.866:19299): pid=99312 uid=0 auid=1000 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744637302.867:19300): pid=99312 uid=0 auid=1000 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744637302.908:19301): pid=99312 uid=0 auid=1000 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744637302.908:19302): pid=99312 uid=0 auid=1000 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744637302.909:19303): pid=99312 uid=0 auid=1000 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=99394 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744637302.964:19304): pid=99394 uid=1000 auid=1000 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744637302.965:19305): pid=99394 uid=1000 auid=1000 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F62617368202D6C202D6320646F636B657220707320323E2F6465762F6E756C6C20207C2067726570202D7620222F70617573655C7C2F7573722F62696E2F706F645C7C6E6F76615F6170695F5C7C636F6E747261696C2E2A696E69745C7C696E69742E2A636F6E747261696C5C7C70726F766973696F6E65725C7C706C6163656D656E742220207C2061776B20277B7072696E7420244E467D27 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744637302.965:19306): pid=99394 uid=1000 auid=1000 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744637302.969:19307): pid=99394 uid=1000 auid=1000 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744637303.071:19308): pid=99394 uid=1000 auid=1000 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744637303.071:19309): pid=99394 uid=1000 auid=1000 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744637303.072:19310): pid=99312 uid=0 auid=1000 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744637303.072:19311): pid=99312 uid=0 auid=1000 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744637303.118:19312): pid=99312 uid=0 auid=1000 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744637303.118:19313): pid=99312 uid=0 auid=1000 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744637303.119:19314): pid=99312 uid=0 auid=1000 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=99445 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744637303.181:19315): pid=99445 uid=1000 auid=1000 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744637303.182:19316): pid=99445 uid=1000 auid=1000 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F62617368202D6C202D6320697020616464722073686F77207C20677265702027696E6574202E2A2F2E2A206272642027207C2061776B20277B7072696E742024327D27 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744637303.182:19317): pid=99445 uid=1000 auid=1000 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744637303.184:19318): pid=99445 uid=1000 auid=1000 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744637303.216:19319): pid=99445 uid=1000 auid=1000 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744637303.216:19320): pid=99445 uid=1000 auid=1000 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744637303.217:19321): pid=99312 uid=0 auid=1000 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744637303.217:19322): pid=99312 uid=0 auid=1000 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744637303.260:19323): pid=99312 uid=0 auid=1000 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744637303.260:19324): pid=99312 uid=0 auid=1000 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744637303.261:19325): pid=99312 uid=0 auid=1000 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=99486 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744637303.321:19326): pid=99486 uid=1000 auid=1000 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744637303.321:19327): pid=99486 uid=1000 auid=1000 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F62617368202D6C202D6320676574656E7420686F7374732031302E302E302E3338207C2068656164202D6E2031207C2061776B20277B7072696E742024327D27 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744637303.322:19328): pid=99486 uid=1000 auid=1000 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744637303.324:19329): pid=99486 uid=1000 auid=1000 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744637303.364:19330): pid=99486 uid=1000 auid=1000 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744637303.364:19331): pid=99486 uid=1000 auid=1000 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744637303.365:19332): pid=99312 uid=0 auid=1000 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744637303.365:19333): pid=99312 uid=0 auid=1000 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744637303.412:19334): pid=99312 uid=0 auid=1000 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744637303.412:19335): pid=99312 uid=0 auid=1000 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744637303.414:19336): pid=99312 uid=0 auid=1000 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=99527 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744637303.472:19337): pid=99527 uid=1000 auid=1000 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744637303.473:19338): pid=99527 uid=1000 auid=1000 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F62617368202D6C202D6320697020616464722073686F77206465762076686F737430207C20677265702027696E6574202E2A2F2E2A206272642027207C2061776B20277B7072696E742024327D27 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744637303.473:19339): pid=99527 uid=1000 auid=1000 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744637303.474:19340): pid=99527 uid=1000 auid=1000 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744637303.515:19341): pid=99527 uid=1000 auid=1000 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744637303.516:19342): pid=99527 uid=1000 auid=1000 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744637303.518:19343): pid=99312 uid=0 auid=1000 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744637303.518:19344): pid=99312 uid=0 auid=1000 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744637303.560:19345): pid=99312 uid=0 auid=1000 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744637303.560:19346): pid=99312 uid=0 auid=1000 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744637303.561:19347): pid=99312 uid=0 auid=1000 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=99568 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744637303.620:19348): pid=99312 uid=0 auid=1000 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744637303.620:19349): pid=99312 uid=0 auid=1000 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744637303.664:19350): pid=99312 uid=0 auid=1000 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744637303.664:19351): pid=99312 uid=0 auid=1000 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744637303.666:19352): pid=99312 uid=0 auid=1000 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=99604 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744637303.719:19353): pid=99312 uid=0 auid=1000 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744637303.719:19354): pid=99312 uid=0 auid=1000 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744637303.762:19355): pid=99312 uid=0 auid=1000 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744637303.762:19356): pid=99312 uid=0 auid=1000 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744637303.764:19357): pid=99312 uid=0 auid=1000 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=99641 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744637303.828:19358): pid=99312 uid=0 auid=1000 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744637303.828:19359): pid=99312 uid=0 auid=1000 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744637303.870:19360): pid=99312 uid=0 auid=1000 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744637303.870:19361): pid=99312 uid=0 auid=1000 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744637303.872:19362): pid=99312 uid=0 auid=1000 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=99677 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744637303.926:19363): pid=99312 uid=0 auid=1000 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744637303.926:19364): pid=99312 uid=0 auid=1000 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744637307.939:19365): pid=99312 uid=0 auid=1000 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744637307.939:19366): pid=99312 uid=0 auid=1000 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744637307.940:19367): pid=99312 uid=0 auid=1000 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=99717 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744637307.968:19368): pid=99312 uid=0 auid=1000 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744637307.968:19369): pid=99312 uid=0 auid=1000 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744637308.010:19370): pid=99312 uid=0 auid=1000 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744637308.010:19371): pid=99312 uid=0 auid=1000 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744637308.012:19372): pid=99312 uid=0 auid=1000 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=99730 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744637308.067:19373): pid=99730 uid=1000 auid=1000 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744637308.067:19374): pid=99730 uid=1000 auid=1000 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F62617368202D6C202D6320726D202D66202F746D702F2A2A74726163656261636B2A2E6C6F67 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744637308.068:19375): pid=99730 uid=1000 auid=1000 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744637308.069:19376): pid=99730 uid=1000 auid=1000 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744637308.103:19377): pid=99730 uid=1000 auid=1000 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744637308.104:19378): pid=99730 uid=1000 auid=1000 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744637308.106:19379): pid=99312 uid=0 auid=1000 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744637308.106:19380): pid=99312 uid=0 auid=1000 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744637308.148:19381): pid=99312 uid=0 auid=1000 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744637308.148:19382): pid=99312 uid=0 auid=1000 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744637308.150:19383): pid=99312 uid=0 auid=1000 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=99768 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744637308.209:19384): pid=99768 uid=1000 auid=1000 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744637308.210:19385): pid=99768 uid=1000 auid=1000 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F62617368202D6C202D6320707974686F6E33202F746D702F7365617263682D62742E7079202D70202F746D70202D69202F746D702F69676E6F72655F74726163656261636B732E6A736F6E exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744637308.210:19386): pid=99768 uid=1000 auid=1000 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744637308.212:19387): pid=99768 uid=1000 auid=1000 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744637308.931:19388): pid=99768 uid=1000 auid=1000 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744637308.931:19389): pid=99768 uid=1000 auid=1000 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744637308.933:19390): pid=99312 uid=0 auid=1000 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744637308.933:19391): pid=99312 uid=0 auid=1000 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744637308.974:19392): pid=99312 uid=0 auid=1000 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744637308.974:19393): pid=99312 uid=0 auid=1000 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744637308.975:19394): pid=99312 uid=0 auid=1000 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=99808 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744637309.000:19395): pid=99312 uid=0 auid=1000 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744637309.000:19396): pid=99312 uid=0 auid=1000 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744637309.001:19397): pid=99312 uid=0 auid=1000 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744637309.001:19398): pid=99312 uid=0 auid=1000 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744637309.002:19399): pid=99312 uid=0 auid=1000 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=99821 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744637309.027:19400): pid=99312 uid=0 auid=1000 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744637309.027:19401): pid=99312 uid=0 auid=1000 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGIN msg=audit(1744637309.028:19402): pid=99312 uid=0 auid=1000 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744637309.028:19403): pid=99312 uid=0 auid=1000 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744637309.029:19404): pid=99312 uid=0 auid=1000 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=99834 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744637309.059:19405): pid=99312 uid=0 auid=1000 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744637309.059:19406): pid=99312 uid=0 auid=1000 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744637309.059:19407): pid=99312 uid=0 auid=1000 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=99317 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744637309.059:19408): pid=99312 uid=0 auid=1000 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=99317 suid=1000 rport=55604 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744637309.060:19409): pid=99312 uid=0 auid=1000 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" type=CRED_DISP msg=audit(1744637309.061:19410): pid=99312 uid=0 auid=1000 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744637309.062:19411): pid=99312 uid=0 auid=1000 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=99312 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=BPF msg=audit(1744637311.407:19412): prog-id=0 op=UNLOAD type=USER_END msg=audit(1744637312.013:19413): pid=89004 uid=1000 auid=1000 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744637312.014:19414): pid=89004 uid=1000 auid=1000 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744637312.110:19415): pid=88376 uid=0 auid=1000 ses=41 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744637312.110:19416): pid=88376 uid=0 auid=1000 ses=41 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744637312.110:19417): pid=88376 uid=0 auid=1000 ses=41 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=88379 suid=1000 rport=46708 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744637312.111:19418): pid=88376 uid=0 auid=1000 ses=41 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=88379 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744637312.112:19419): pid=88376 uid=0 auid=1000 ses=41 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=CRED_DISP msg=audit(1744637312.113:19420): pid=88376 uid=0 auid=1000 ses=41 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744637312.113:19421): pid=88376 uid=0 auid=1000 ses=41 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=88376 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=CRYPTO_KEY_USER msg=audit(1744637312.140:19422): pid=99890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=99890 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1744637312.141:19423): pid=99889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=99890 suid=74 rport=51782 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1744637312.141:19424): pid=99889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=99890 suid=74 rport=51782 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1744637312.203:19425): pid=99889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744637312.203:19426): pid=99889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1744637312.237:19427): pid=99889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744637312.238:19428): pid=99889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=99890 suid=74 rport=51782 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1744637312.239:19429): pid=99889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1744637312.239:19430): pid=99889 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=48 res=1UID="root" OLD-AUID="unset" AUID="rocky" type=SYSCALL msg=audit(1744637312.239:19430): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffe848765f0 a2=4 a3=3e8 items=0 ppid=12346 pid=99889 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=48 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637312.239:19430): proctitle=737368643A20726F636B79205B707269765D type=USER_ROLE_CHANGE msg=audit(1744637312.240:19431): pid=99889 uid=0 auid=1000 ses=48 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_START msg=audit(1744637312.255:19432): pid=99889 uid=0 auid=1000 ses=48 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744637312.256:19433): pid=99892 uid=0 auid=1000 ses=48 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=99892 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=CRED_ACQ msg=audit(1744637312.257:19434): pid=99892 uid=0 auid=1000 ses=48 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_LOGIN msg=audit(1744637312.299:19435): pid=99889 uid=0 auid=1000 ses=48 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744637312.299:19436): pid=99889 uid=0 auid=1000 ses=48 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744637312.300:19437): pid=99889 uid=0 auid=1000 ses=48 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=99893 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744637312.333:19438): pid=99889 uid=0 auid=1000 ses=48 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744637312.333:19439): pid=99889 uid=0 auid=1000 ses=48 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744637312.333:19440): pid=99889 uid=0 auid=1000 ses=48 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=99892 suid=1000 rport=51782 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744637312.335:19441): pid=99889 uid=0 auid=1000 ses=48 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=99892 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744637312.337:19442): pid=99889 uid=0 auid=1000 ses=48 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=CRED_DISP msg=audit(1744637312.337:19443): pid=99889 uid=0 auid=1000 ses=48 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744637312.337:19444): pid=99889 uid=0 auid=1000 ses=48 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=99889 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=SERVICE_STOP msg=audit(1744637322.383:19445): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1744637322.404:19446): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744637333.276:19447): pid=100374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=100374 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1744637333.277:19448): pid=100373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=100374 suid=74 rport=51964 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1744637333.277:19449): pid=100373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=100374 suid=74 rport=51964 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1744637333.340:19450): pid=100373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744637333.340:19451): pid=100373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1744637333.377:19452): pid=100373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744637333.378:19453): pid=100373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=100374 suid=74 rport=51964 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1744637333.379:19454): pid=100373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1744637333.379:19455): pid=100373 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=49 res=1UID="root" OLD-AUID="unset" AUID="rocky" type=SYSCALL msg=audit(1744637333.379:19455): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffe8d7de990 a2=4 a3=3e8 items=0 ppid=12346 pid=100373 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=49 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637333.379:19455): proctitle=737368643A20726F636B79205B707269765D type=USER_ROLE_CHANGE msg=audit(1744637333.380:19456): pid=100373 uid=0 auid=1000 ses=49 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=SERVICE_START msg=audit(1744637333.410:19457): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1744637333.448:19458): pid=100377 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRED_ACQ msg=audit(1744637333.448:19459): pid=100377 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="rocky" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=USER_ROLE_CHANGE msg=audit(1744637333.448:19460): pid=100377 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1744637333.449:19461): pid=100377 uid=0 subj=system_u:system_r:init_t:s0 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=50 res=1UID="root" OLD-AUID="unset" AUID="rocky" type=SYSCALL msg=audit(1744637333.449:19461): arch=c000003e syscall=1 success=yes exit=4 a0=7 a1=7ffe2f7afdf0 a2=4 a3=3e8 items=0 ppid=1 pid=100377 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=50 comm="(systemd)" exe="/usr/lib/systemd/systemd" subj=system_u:system_r:init_t:s0 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637333.449:19461): proctitle="(systemd)" type=USER_START msg=audit(1744637333.451:19462): pid=100377 uid=0 auid=1000 ses=50 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="rocky" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" type=SERVICE_START msg=audit(1744637333.597:19463): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1744637333.610:19464): pid=100373 uid=0 auid=1000 ses=49 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744637333.611:19465): pid=100386 uid=0 auid=1000 ses=49 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=100386 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=CRED_ACQ msg=audit(1744637333.612:19466): pid=100386 uid=0 auid=1000 ses=49 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_LOGIN msg=audit(1744637333.658:19467): pid=100373 uid=0 auid=1000 ses=49 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744637333.658:19468): pid=100373 uid=0 auid=1000 ses=49 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744637333.660:19469): pid=100373 uid=0 auid=1000 ses=49 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=100387 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744637334.094:19470): pid=100373 uid=0 auid=1000 ses=49 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=100386 suid=1000 rport=51964 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744637334.095:19471): pid=100373 uid=0 auid=1000 ses=49 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=100386 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744637334.097:19472): pid=100373 uid=0 auid=1000 ses=49 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=CRED_DISP msg=audit(1744637334.097:19473): pid=100373 uid=0 auid=1000 ses=49 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_END msg=audit(1744637334.097:19474): pid=100373 uid=0 auid=1000 ses=49 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744637334.097:19475): pid=100373 uid=0 auid=1000 ses=49 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744637334.098:19476): pid=100373 uid=0 auid=1000 ses=49 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=100373 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=CRYPTO_KEY_USER msg=audit(1744637334.117:19477): pid=100402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=100402 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1744637334.118:19478): pid=100401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=100402 suid=74 rport=51978 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1744637334.118:19479): pid=100401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=100402 suid=74 rport=51978 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1744637334.180:19480): pid=100401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744637334.181:19481): pid=100401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1744637334.216:19482): pid=100401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744637334.216:19483): pid=100401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=100402 suid=74 rport=51978 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1744637334.218:19484): pid=100401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1744637334.219:19485): pid=100401 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=51 res=1UID="root" OLD-AUID="unset" AUID="rocky" type=SYSCALL msg=audit(1744637334.219:19485): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffe20701be0 a2=4 a3=3e8 items=0 ppid=12346 pid=100401 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=51 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637334.219:19485): proctitle=737368643A20726F636B79205B707269765D type=USER_ROLE_CHANGE msg=audit(1744637334.220:19486): pid=100401 uid=0 auid=1000 ses=51 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_START msg=audit(1744637334.243:19487): pid=100401 uid=0 auid=1000 ses=51 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744637334.244:19488): pid=100404 uid=0 auid=1000 ses=51 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=100404 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=CRED_ACQ msg=audit(1744637334.245:19489): pid=100404 uid=0 auid=1000 ses=51 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_LOGIN msg=audit(1744637334.290:19490): pid=100401 uid=0 auid=1000 ses=51 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744637334.290:19491): pid=100401 uid=0 auid=1000 ses=51 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744637334.291:19492): pid=100401 uid=0 auid=1000 ses=51 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=100405 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744637334.371:19493): pid=100446 uid=1000 auid=1000 ses=51 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744637334.372:19494): pid=100446 uid=1000 auid=1000 ses=51 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd="/home/rocky/src/opensdn-io/tf-dev-test/deployment-test/../common/setup_docker.sh" exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744637334.372:19495): pid=100446 uid=1000 auid=1000 ses=51 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744637334.375:19496): pid=100446 uid=1000 auid=1000 ses=51 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744637334.444:19497): pid=100446 uid=1000 auid=1000 ses=51 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744637334.444:19498): pid=100446 uid=1000 auid=1000 ses=51 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_ACCT msg=audit(1744637334.504:19499): pid=100484 uid=1000 auid=1000 ses=51 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744637334.504:19500): pid=100484 uid=1000 auid=1000 ses=51 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=646F636B65722070756C6C206E657875732E677A312E6F70656E73646E2E696F3A353130312F74662D6465706C6F796D656E742D746573743A6D61737465722D315F355F335F312D315F30 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744637334.505:19501): pid=100484 uid=1000 auid=1000 ses=51 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744637334.507:19502): pid=100484 uid=1000 auid=1000 ses=51 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744637334.672:19503): pid=100484 uid=1000 auid=1000 ses=51 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744637334.672:19504): pid=100484 uid=1000 auid=1000 ses=51 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744637334.674:19505): pid=100401 uid=0 auid=1000 ses=51 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744637334.674:19506): pid=100401 uid=0 auid=1000 ses=51 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744637334.674:19507): pid=100401 uid=0 auid=1000 ses=51 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=100404 suid=1000 rport=51978 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744637334.674:19508): pid=100401 uid=0 auid=1000 ses=51 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=100404 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744637334.676:19509): pid=100401 uid=0 auid=1000 ses=51 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=CRED_DISP msg=audit(1744637334.676:19510): pid=100401 uid=0 auid=1000 ses=51 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744637334.677:19511): pid=100401 uid=0 auid=1000 ses=51 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=100401 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=CRYPTO_KEY_USER msg=audit(1744637334.704:19512): pid=100495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=100495 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1744637334.705:19513): pid=100494 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=100495 suid=74 rport=51982 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1744637334.705:19514): pid=100494 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=100495 suid=74 rport=51982 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1744637334.767:19515): pid=100494 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744637334.767:19516): pid=100494 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1744637334.801:19517): pid=100494 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744637334.802:19518): pid=100494 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=100495 suid=74 rport=51982 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1744637334.804:19519): pid=100494 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1744637334.804:19520): pid=100494 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=52 res=1UID="root" OLD-AUID="unset" AUID="rocky" type=SYSCALL msg=audit(1744637334.804:19520): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7fff2dbcf960 a2=4 a3=3e8 items=0 ppid=12346 pid=100494 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=52 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637334.804:19520): proctitle=737368643A20726F636B79205B707269765D type=USER_ROLE_CHANGE msg=audit(1744637334.805:19521): pid=100494 uid=0 auid=1000 ses=52 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_START msg=audit(1744637334.821:19522): pid=100494 uid=0 auid=1000 ses=52 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744637334.823:19523): pid=100497 uid=0 auid=1000 ses=52 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=100497 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=CRED_ACQ msg=audit(1744637334.824:19524): pid=100497 uid=0 auid=1000 ses=52 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_LOGIN msg=audit(1744637334.866:19525): pid=100494 uid=0 auid=1000 ses=52 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744637334.866:19526): pid=100494 uid=0 auid=1000 ses=52 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744637334.867:19527): pid=100494 uid=0 auid=1000 ses=52 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=100498 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744637334.987:19528): pid=100494 uid=0 auid=1000 ses=52 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=100497 suid=1000 rport=51982 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744637334.988:19529): pid=100494 uid=0 auid=1000 ses=52 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=100497 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744637334.989:19530): pid=100494 uid=0 auid=1000 ses=52 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=CRED_DISP msg=audit(1744637334.990:19531): pid=100494 uid=0 auid=1000 ses=52 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_END msg=audit(1744637334.990:19532): pid=100494 uid=0 auid=1000 ses=52 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744637334.990:19533): pid=100494 uid=0 auid=1000 ses=52 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744637334.990:19534): pid=100494 uid=0 auid=1000 ses=52 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=100494 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=SERVICE_STOP msg=audit(1744637338.251:19535): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1744637338.282:19536): prog-id=0 op=UNLOAD type=BPF msg=audit(1744637338.282:19537): prog-id=0 op=UNLOAD type=SERVICE_STOP msg=audit(1744637345.131:19538): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1744637345.153:19539): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744637358.659:19540): pid=100566 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=100566 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1744637358.660:19541): pid=100565 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=100566 suid=74 rport=52116 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1744637358.660:19542): pid=100565 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=100566 suid=74 rport=52116 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1744637358.722:19543): pid=100565 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744637358.722:19544): pid=100565 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1744637358.757:19545): pid=100565 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744637358.759:19546): pid=100565 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=100566 suid=74 rport=52116 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1744637358.761:19547): pid=100565 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1744637358.762:19548): pid=100565 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=53 res=1UID="root" OLD-AUID="unset" AUID="rocky" type=SYSCALL msg=audit(1744637358.762:19548): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7fff214ed8a0 a2=4 a3=3e8 items=0 ppid=12346 pid=100565 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=53 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637358.762:19548): proctitle=737368643A20726F636B79205B707269765D type=USER_ROLE_CHANGE msg=audit(1744637358.763:19549): pid=100565 uid=0 auid=1000 ses=53 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=SERVICE_START msg=audit(1744637358.791:19550): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1744637358.834:19551): pid=100569 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRED_ACQ msg=audit(1744637358.834:19552): pid=100569 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="rocky" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=USER_ROLE_CHANGE msg=audit(1744637358.834:19553): pid=100569 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1744637358.834:19554): pid=100569 uid=0 subj=system_u:system_r:init_t:s0 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=54 res=1UID="root" OLD-AUID="unset" AUID="rocky" type=SYSCALL msg=audit(1744637358.834:19554): arch=c000003e syscall=1 success=yes exit=4 a0=7 a1=7ffe2f7afdf0 a2=4 a3=3e8 items=0 ppid=1 pid=100569 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=54 comm="(systemd)" exe="/usr/lib/systemd/systemd" subj=system_u:system_r:init_t:s0 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637358.834:19554): proctitle="(systemd)" type=USER_START msg=audit(1744637358.836:19555): pid=100569 uid=0 auid=1000 ses=54 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="rocky" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" type=SERVICE_START msg=audit(1744637358.970:19556): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1744637358.983:19557): pid=100565 uid=0 auid=1000 ses=53 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744637358.984:19558): pid=100578 uid=0 auid=1000 ses=53 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=100578 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=CRED_ACQ msg=audit(1744637358.985:19559): pid=100578 uid=0 auid=1000 ses=53 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_LOGIN msg=audit(1744637359.031:19560): pid=100565 uid=0 auid=1000 ses=53 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744637359.031:19561): pid=100565 uid=0 auid=1000 ses=53 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744637359.032:19562): pid=100565 uid=0 auid=1000 ses=53 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=100579 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744637359.051:19563): pid=100565 uid=0 auid=1000 ses=53 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=100578 suid=1000 rport=52116 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744637359.052:19564): pid=100565 uid=0 auid=1000 ses=53 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=100578 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744637359.053:19565): pid=100565 uid=0 auid=1000 ses=53 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=CRED_DISP msg=audit(1744637359.053:19566): pid=100565 uid=0 auid=1000 ses=53 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_END msg=audit(1744637359.054:19567): pid=100565 uid=0 auid=1000 ses=53 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744637359.054:19568): pid=100565 uid=0 auid=1000 ses=53 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744637359.054:19569): pid=100565 uid=0 auid=1000 ses=53 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=100565 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=CRYPTO_KEY_USER msg=audit(1744637359.078:19570): pid=100593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=100593 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1744637359.079:19571): pid=100592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=100593 suid=74 rport=52118 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1744637359.079:19572): pid=100592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=100593 suid=74 rport=52118 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1744637359.141:19573): pid=100592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744637359.141:19574): pid=100592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1744637359.173:19575): pid=100592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744637359.174:19576): pid=100592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=100593 suid=74 rport=52118 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1744637359.175:19577): pid=100592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1744637359.175:19578): pid=100592 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=55 res=1UID="root" OLD-AUID="unset" AUID="rocky" type=SYSCALL msg=audit(1744637359.175:19578): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffe7cb0fcd0 a2=4 a3=3e8 items=0 ppid=12346 pid=100592 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=55 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637359.175:19578): proctitle=737368643A20726F636B79205B707269765D type=USER_ROLE_CHANGE msg=audit(1744637359.176:19579): pid=100592 uid=0 auid=1000 ses=55 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_START msg=audit(1744637359.194:19580): pid=100592 uid=0 auid=1000 ses=55 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744637359.196:19581): pid=100595 uid=0 auid=1000 ses=55 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=100595 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=CRED_ACQ msg=audit(1744637359.197:19582): pid=100595 uid=0 auid=1000 ses=55 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_LOGIN msg=audit(1744637359.239:19583): pid=100592 uid=0 auid=1000 ses=55 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744637359.239:19584): pid=100592 uid=0 auid=1000 ses=55 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744637359.240:19585): pid=100592 uid=0 auid=1000 ses=55 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=100596 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744637359.616:19586): pid=100592 uid=0 auid=1000 ses=55 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=100595 suid=1000 rport=52118 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744637359.617:19587): pid=100592 uid=0 auid=1000 ses=55 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=100595 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744637359.618:19588): pid=100592 uid=0 auid=1000 ses=55 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=CRED_DISP msg=audit(1744637359.619:19589): pid=100592 uid=0 auid=1000 ses=55 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_END msg=audit(1744637359.619:19590): pid=100592 uid=0 auid=1000 ses=55 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744637359.619:19591): pid=100592 uid=0 auid=1000 ses=55 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744637359.619:19592): pid=100592 uid=0 auid=1000 ses=55 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=100592 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=CRYPTO_KEY_USER msg=audit(1744637359.636:19593): pid=100611 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=100611 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1744637359.637:19594): pid=100610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=100611 suid=74 rport=52122 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1744637359.637:19595): pid=100610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=100611 suid=74 rport=52122 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1744637359.700:19596): pid=100610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744637359.700:19597): pid=100610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1744637359.733:19598): pid=100610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744637359.733:19599): pid=100610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=100611 suid=74 rport=52122 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1744637359.735:19600): pid=100610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1744637359.735:19601): pid=100610 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=56 res=1UID="root" OLD-AUID="unset" AUID="rocky" type=SYSCALL msg=audit(1744637359.735:19601): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffd284bf710 a2=4 a3=3e8 items=0 ppid=12346 pid=100610 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=56 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637359.735:19601): proctitle=737368643A20726F636B79205B707269765D type=USER_ROLE_CHANGE msg=audit(1744637359.736:19602): pid=100610 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_START msg=audit(1744637359.752:19603): pid=100610 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744637359.753:19604): pid=100613 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=100613 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=CRED_ACQ msg=audit(1744637359.753:19605): pid=100613 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_LOGIN msg=audit(1744637359.799:19606): pid=100610 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744637359.799:19607): pid=100610 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744637359.800:19608): pid=100610 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=100614 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744637359.918:19609): pid=100704 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=100704 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1744637359.919:19610): pid=100703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=100704 suid=74 rport=47062 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1744637359.919:19611): pid=100703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=100704 suid=74 rport=47062 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1744637360.033:19612): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sssd-kcm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_AUTH msg=audit(1744637360.081:19613): pid=100703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744637360.081:19614): pid=100703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:70:6d:53:7b:b9:b1:0c:0b:97:46:57:0a:90:24:61:0d:60:dd:24:ba:9a:35:b7:5d:bd:60:94:bc:89:4a:f4:2f exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1744637360.114:19615): pid=100703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744637360.114:19616): pid=100703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=100704 suid=74 rport=47062 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1744637360.116:19617): pid=100703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1744637360.116:19618): pid=100703 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=57 res=1UID="root" OLD-AUID="unset" AUID="rocky" type=SYSCALL msg=audit(1744637360.116:19618): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffc1b7fef80 a2=4 a3=3e8 items=0 ppid=12346 pid=100703 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=57 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637360.116:19618): proctitle=737368643A20726F636B79205B707269765D type=USER_ROLE_CHANGE msg=audit(1744637360.117:19619): pid=100703 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_START msg=audit(1744637360.133:19620): pid=100703 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744637360.134:19621): pid=100708 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=100708 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=CRED_ACQ msg=audit(1744637360.135:19622): pid=100708 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_LOGIN msg=audit(1744637360.176:19623): pid=100703 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744637360.176:19624): pid=100703 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744637360.177:19625): pid=100703 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=100709 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744637360.195:19626): pid=100703 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744637360.195:19627): pid=100703 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744637360.195:19628): pid=100703 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=100708 suid=1000 rport=47062 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744637360.195:19629): pid=100703 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=100708 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744637360.197:19630): pid=100703 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" type=CRED_DISP msg=audit(1744637360.197:19631): pid=100703 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744637360.198:19632): pid=100703 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=100703 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=CRYPTO_KEY_USER msg=audit(1744637360.218:19633): pid=100725 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=100725 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1744637360.218:19634): pid=100724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=100725 suid=74 rport=47064 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1744637360.218:19635): pid=100724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=100725 suid=74 rport=47064 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1744637360.301:19636): pid=100724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744637360.301:19637): pid=100724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:70:6d:53:7b:b9:b1:0c:0b:97:46:57:0a:90:24:61:0d:60:dd:24:ba:9a:35:b7:5d:bd:60:94:bc:89:4a:f4:2f exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1744637360.335:19638): pid=100724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744637360.336:19639): pid=100724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=100725 suid=74 rport=47064 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1744637360.337:19640): pid=100724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1744637360.337:19641): pid=100724 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=58 res=1UID="root" OLD-AUID="unset" AUID="rocky" type=SYSCALL msg=audit(1744637360.337:19641): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7fff70fe9e00 a2=4 a3=3e8 items=0 ppid=12346 pid=100724 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=58 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637360.337:19641): proctitle=737368643A20726F636B79205B707269765D type=USER_ROLE_CHANGE msg=audit(1744637360.338:19642): pid=100724 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_START msg=audit(1744637360.354:19643): pid=100724 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744637360.355:19644): pid=100727 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=100727 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=CRED_ACQ msg=audit(1744637360.356:19645): pid=100727 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_LOGIN msg=audit(1744637360.398:19646): pid=100724 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744637360.398:19647): pid=100724 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744637360.399:19648): pid=100724 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=100728 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744637360.421:19649): pid=100724 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744637360.421:19650): pid=100724 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744637360.421:19651): pid=100724 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=100727 suid=1000 rport=47064 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744637360.422:19652): pid=100724 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=100727 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744637360.423:19653): pid=100724 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" type=CRED_DISP msg=audit(1744637360.423:19654): pid=100724 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744637360.424:19655): pid=100724 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=100724 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=CRYPTO_KEY_USER msg=audit(1744637360.442:19656): pid=100744 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=100744 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1744637360.442:19657): pid=100743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=100744 suid=74 rport=47066 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1744637360.443:19658): pid=100743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=100744 suid=74 rport=47066 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1744637360.518:19659): pid=100743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744637360.518:19660): pid=100743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:70:6d:53:7b:b9:b1:0c:0b:97:46:57:0a:90:24:61:0d:60:dd:24:ba:9a:35:b7:5d:bd:60:94:bc:89:4a:f4:2f exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1744637360.551:19661): pid=100743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744637360.552:19662): pid=100743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=100744 suid=74 rport=47066 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1744637360.553:19663): pid=100743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1744637360.553:19664): pid=100743 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=59 res=1UID="root" OLD-AUID="unset" AUID="rocky" type=SYSCALL msg=audit(1744637360.553:19664): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffe9d9c1630 a2=4 a3=3e8 items=0 ppid=12346 pid=100743 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=59 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637360.553:19664): proctitle=737368643A20726F636B79205B707269765D type=USER_ROLE_CHANGE msg=audit(1744637360.554:19665): pid=100743 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_START msg=audit(1744637360.569:19666): pid=100743 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744637360.570:19667): pid=100746 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=100746 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=CRED_ACQ msg=audit(1744637360.571:19668): pid=100746 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_LOGIN msg=audit(1744637360.612:19669): pid=100743 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744637360.612:19670): pid=100743 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744637360.613:19671): pid=100743 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=100747 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744637360.634:19672): pid=100743 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_LOGOUT msg=audit(1744637360.634:19673): pid=100743 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744637360.635:19674): pid=100743 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=100746 suid=1000 rport=47066 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744637360.636:19675): pid=100743 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=100746 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_END msg=audit(1744637360.637:19676): pid=100743 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" type=CRED_DISP msg=audit(1744637360.637:19677): pid=100743 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744637360.637:19678): pid=100743 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=100743 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=CRYPTO_KEY_USER msg=audit(1744637360.652:19679): pid=100762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=100762 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1744637360.653:19680): pid=100761 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=100762 suid=74 rport=47074 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1744637360.653:19681): pid=100761 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=100762 suid=74 rport=47074 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1744637360.728:19682): pid=100761 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744637360.728:19683): pid=100761 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:70:6d:53:7b:b9:b1:0c:0b:97:46:57:0a:90:24:61:0d:60:dd:24:ba:9a:35:b7:5d:bd:60:94:bc:89:4a:f4:2f exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1744637360.762:19684): pid=100761 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1744637360.763:19685): pid=100761 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=100762 suid=74 rport=47074 laddr=10.0.0.38 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1744637360.764:19686): pid=100761 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1744637360.764:19687): pid=100761 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=60 res=1UID="root" OLD-AUID="unset" AUID="rocky" type=SYSCALL msg=audit(1744637360.764:19687): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffe8b41d370 a2=4 a3=3e8 items=0 ppid=12346 pid=100761 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=60 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637360.764:19687): proctitle=737368643A20726F636B79205B707269765D type=USER_ROLE_CHANGE msg=audit(1744637360.765:19688): pid=100761 uid=0 auid=1000 ses=60 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_START msg=audit(1744637360.782:19689): pid=100761 uid=0 auid=1000 ses=60 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" type=CRYPTO_KEY_USER msg=audit(1744637360.783:19690): pid=100764 uid=0 auid=1000 ses=60 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=100764 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root" type=CRED_ACQ msg=audit(1744637360.784:19691): pid=100764 uid=0 auid=1000 ses=60 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.38 addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" type=USER_LOGIN msg=audit(1744637360.825:19692): pid=100761 uid=0 auid=1000 ses=60 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=USER_START msg=audit(1744637360.825:19693): pid=100761 uid=0 auid=1000 ses=60 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.38 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky" type=CRYPTO_KEY_USER msg=audit(1744637360.826:19694): pid=100761 uid=0 auid=1000 ses=60 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:49:3e:db:e1:72:bf:39:48:e1:39:e5:a1:30:83:6d:e6:55:bc:f7:03:50:0b:33:19:9d:a3:77:23:e0:16:39:d0 direction=? spid=100765 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky" type=USER_ACCT msg=audit(1744637360.900:19695): pid=100791 uid=1000 auid=1000 ses=60 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744637360.900:19696): pid=100791 uid=1000 auid=1000 ses=60 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/tmp/ansible-logs" cmd="contrail-status" exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744637360.901:19697): pid=100791 uid=1000 auid=1000 ses=60 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744637360.903:19698): pid=100791 uid=1000 auid=1000 ses=60 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=BPF msg=audit(1744637361.298:19699): prog-id=707 op=LOAD type=SYSCALL msg=audit(1744637361.298:19699): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000223c48 a2=90 a3=0 items=0 ppid=100814 pid=100827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637361.298:19699): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34386637306261646662663661636462303361653438666134 type=BPF msg=audit(1744637361.298:19700): prog-id=708 op=LOAD type=SYSCALL msg=audit(1744637361.298:19700): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c0002239d8 a2=90 a3=0 items=0 ppid=100814 pid=100827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637361.298:19700): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34386637306261646662663661636462303361653438666134 type=BPF msg=audit(1744637361.298:19701): prog-id=0 op=UNLOAD type=BPF msg=audit(1744637361.298:19702): prog-id=0 op=UNLOAD type=BPF msg=audit(1744637361.299:19703): prog-id=709 op=LOAD type=SYSCALL msg=audit(1744637361.299:19703): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000223eb0 a2=90 a3=0 items=0 ppid=100814 pid=100827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1744637361.299:19703): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34386637306261646662663661636462303361653438666134 type=BPF msg=audit(1744637363.022:19704): prog-id=0 op=UNLOAD type=USER_END msg=audit(1744637363.139:19705): pid=100791 uid=1000 auid=1000 ses=60 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744637363.139:19706): pid=100791 uid=1000 auid=1000 ses=60 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_ACCT msg=audit(1744637363.178:19707): pid=100893 uid=1000 auid=1000 ses=60 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744637363.178:19708): pid=100893 uid=1000 auid=1000 ses=60 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/tmp/ansible-logs" cmd=63686F776E202D52203A202F746D702F616E7369626C652D6C6F67732F6C6F6773 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744637363.179:19709): pid=100893 uid=1000 auid=1000 ses=60 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744637363.182:19710): pid=100893 uid=1000 auid=1000 ses=60 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744637363.184:19711): pid=100893 uid=1000 auid=1000 ses=60 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744637363.184:19712): pid=100893 uid=1000 auid=1000 ses=60 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_ACCT msg=audit(1744637363.250:19713): pid=100904 uid=1000 auid=1000 ses=60 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744637363.250:19714): pid=100904 uid=1000 auid=1000 ses=60 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/tmp/ansible-logs" cmd=6E657473746174202D6C706E exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744637363.251:19715): pid=100904 uid=1000 auid=1000 ses=60 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744637363.253:19716): pid=100904 uid=1000 auid=1000 ses=60 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744637363.339:19717): pid=100904 uid=1000 auid=1000 ses=60 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744637363.339:19718): pid=100904 uid=1000 auid=1000 ses=60 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_ACCT msg=audit(1744637363.457:19719): pid=100922 uid=1000 auid=1000 ses=60 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744637363.457:19720): pid=100922 uid=1000 auid=1000 ses=60 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/tmp/ansible-logs" cmd=6370202F6574632F6368726F6E792E636F6E66202F746D702F616E7369626C652D6C6F67732F6C6F67732F73797374656D2F exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744637363.458:19721): pid=100922 uid=1000 auid=1000 ses=60 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744637363.459:19722): pid=100922 uid=1000 auid=1000 ses=60 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744637363.463:19723): pid=100922 uid=1000 auid=1000 ses=60 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744637363.463:19724): pid=100922 uid=1000 auid=1000 ses=60 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_ACCT msg=audit(1744637363.531:19725): pid=100927 uid=1000 auid=1000 ses=60 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744637363.531:19726): pid=100927 uid=1000 auid=1000 ses=60 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/tmp/ansible-logs" cmd=6370202F7661722F6C6F672F6D65737361676573202F746D702F616E7369626C652D6C6F67732F6C6F67732F73797374656D2F exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744637363.532:19727): pid=100927 uid=1000 auid=1000 ses=60 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744637363.534:19728): pid=100927 uid=1000 auid=1000 ses=60 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_END msg=audit(1744637363.538:19729): pid=100927 uid=1000 auid=1000 ses=60 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=CRED_DISP msg=audit(1744637363.539:19730): pid=100927 uid=1000 auid=1000 ses=60 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_ACCT msg=audit(1744637363.577:19731): pid=100931 uid=1000 auid=1000 ses=60 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_CMD msg=audit(1744637363.577:19732): pid=100931 uid=1000 auid=1000 ses=60 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/tmp/ansible-logs" cmd=62617368202D63206370202D72202F7661722F6C6F672F61756469742F2A202F746D702F616E7369626C652D6C6F67732F6C6F67732F73797374656D2F61756469742F20323E2F6465762F6E756C6C exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky" type=CRED_REFR msg=audit(1744637363.578:19733): pid=100931 uid=1000 auid=1000 ses=60 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky" type=USER_START msg=audit(1744637363.580:19734): pid=100931 uid=1000 auid=1000 ses=60 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"