type=DAEMON_START msg=audit(1774358093.861:3166): op=start ver=3.1.5 format=enriched kernel=5.14.0-503.14.1.el9_5.x86_64 auid=4294967295 pid=693 uid=0 ses=4294967295 subj=system_u:system_r:auditd_t:s0 res=successAUID="unset" UID="root"
type=SERVICE_START msg=audit(1774358093.880:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=rpcbind comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1774358093.882:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1774358093.884:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CONFIG_CHANGE msg=audit(1774358093.917:8): op=set audit_backlog_limit=8192 old=64 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 res=1AUID="unset"
type=SYSCALL msg=audit(1774358093.917:8): arch=c000003e syscall=44 success=yes exit=60 a0=3 a1=7ffe50ccb750 a2=3c a3=0 items=0 ppid=698 pid=713 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:unconfined_service_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendto AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358093.917:8): proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573
type=CONFIG_CHANGE msg=audit(1774358093.917:9): op=set audit_failure=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 res=1AUID="unset"
type=SYSCALL msg=audit(1774358093.917:9): arch=c000003e syscall=44 success=yes exit=60 a0=3 a1=7ffe50ccb750 a2=3c a3=0 items=0 ppid=698 pid=713 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:unconfined_service_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendto AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358093.917:9): proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573
type=CONFIG_CHANGE msg=audit(1774358093.918:10): op=set audit_backlog_wait_time=60000 old=60000 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 res=1AUID="unset"
type=SYSCALL msg=audit(1774358093.918:10): arch=c000003e syscall=44 success=yes exit=60 a0=3 a1=7ffe50ccb750 a2=3c a3=0 items=0 ppid=698 pid=713 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:unconfined_service_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendto AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358093.918:10): proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573
type=SERVICE_START msg=audit(1774358093.920:11): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=auditd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SYSTEM_BOOT msg=audit(1774358093.936:12): pid=720 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1774358093.940:13): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1774358094.057:14): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ldconfig comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1774358094.082:15): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-update-done comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1774358094.097:16): prog-id=20 op=LOAD
type=SERVICE_START msg=audit(1774358094.139:17): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbus-broker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1774358094.141:18): prog-id=21 op=LOAD
type=BPF msg=audit(1774358094.161:19): prog-id=22 op=LOAD
type=BPF msg=audit(1774358094.161:20): prog-id=23 op=LOAD
type=SERVICE_START msg=audit(1774358094.164:21): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=irqbalance comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1774358094.167:22): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=rngd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1774358094.171:23): prog-id=24 op=LOAD
type=BPF msg=audit(1774358094.172:24): prog-id=25 op=LOAD
type=BPF msg=audit(1774358094.172:25): prog-id=26 op=LOAD
type=SERVICE_START msg=audit(1774358094.176:26): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dracut-shutdown comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1774358094.197:27): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=chronyd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1774358094.217:28): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-logind comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1774358103.162:29): prog-id=27 op=LOAD
type=BPF msg=audit(1774358103.162:30): prog-id=28 op=LOAD
type=SERVICE_START msg=audit(1774358103.209:31): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1774358103.308:32): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cloud-init-local comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1774358103.431:33): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1774358103.445:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1774358103.451:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=gssproxy comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1774358103.467:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=ADD_GROUP msg=audit(1774358104.585:37): pid=897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cloud_init_t:s0 msg='op=add-group acct="rocky" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=ADD_USER msg=audit(1774358104.588:38): pid=897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cloud_init_t:s0 msg='op=add-user acct="rocky" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_MGMT msg=audit(1774358104.588:39): pid=897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cloud_init_t:s0 msg='op=add-user-to-group grp="adm" acct="rocky" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_MGMT msg=audit(1774358104.588:40): pid=897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cloud_init_t:s0 msg='op=add-user-to-group grp="systemd-journal" acct="rocky" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_MGMT msg=audit(1774358104.588:41): pid=897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cloud_init_t:s0 msg='op=add-to-shadow-group grp="adm" acct="rocky" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_MGMT msg=audit(1774358104.588:42): pid=897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cloud_init_t:s0 msg='op=add-to-shadow-group grp="systemd-journal" acct="rocky" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_MGMT msg=audit(1774358104.664:43): pid=897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cloud_init_t:s0 msg='op=add-home-dir id=1000 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" ID="rocky"
type=ACCT_LOCK msg=audit(1774358104.692:44): pid=904 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:passwd_t:s0 msg='op=locked-password id=1000 exe="/usr/bin/passwd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" ID="rocky"
type=SERVICE_START msg=audit(1774358104.856:45): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cloud-init comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1774358104.896:46): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=rpc-statd-notify comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1774358104.905:47): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1774358104.915:48): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1774358105.186:49): pid=915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=915 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=SERVICE_STOP msg=audit(1774358105.188:50): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1774358105.214:51): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1774358105.254:52): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cloud-config comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1774358105.272:53): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-user-sessions comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1774358105.279:54): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=crond comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1774358105.281:55): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=getty@tty1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1774358105.284:56): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=serial-getty@ttyS0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SYSTEM_RUNLEVEL msg=audit(1774358105.295:57): pid=1228 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='old-level=N new-level=3 comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1774358105.298:58): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-update-utmp-runlevel comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1774358105.298:59): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-update-utmp-runlevel comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1774358105.725:60): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cloud-final comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1774358106.097:61): pid=1818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=1818 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1774358106.099:62): pid=1809 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=1818 suid=74 rport=37684 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1774358106.099:63): pid=1809 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=1818 suid=74 rport=37684 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1774358106.170:64): pid=1809 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1774358106.170:65): pid=1809 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1774358106.177:66): pid=1809 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1774358106.177:67): pid=1809 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1818 suid=74 rport=37684 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1774358106.179:68): pid=1809 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1774358106.179:69): pid=1809 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=1 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1774358106.179:69): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffc96a8d380 a2=4 a3=3e8 items=0 ppid=1166 pid=1809 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358106.179:69): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1774358106.181:70): pid=1809 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pam_selinux default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=SERVICE_START msg=audit(1774358106.226:71): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1774358106.243:72): pid=1892 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_ACQ msg=audit(1774358106.243:73): pid=1892 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="rocky" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_ROLE_CHANGE msg=audit(1774358106.243:74): pid=1892 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=pam_selinux default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1774358106.243:75): pid=1892 uid=0 subj=system_u:system_r:init_t:s0 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=2 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1774358106.243:75): arch=c000003e syscall=1 success=yes exit=4 a0=7 a1=7ffea224e290 a2=4 a3=3e8 items=0 ppid=1 pid=1892 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=2 comm="(systemd)" exe="/usr/lib/systemd/systemd" subj=system_u:system_r:init_t:s0 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358106.243:75): proctitle="(systemd)"
type=USER_START msg=audit(1774358106.245:76): pid=1892 uid=0 auid=1000 ses=2 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_umask,pam_namespace,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="rocky" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SERVICE_START msg=audit(1774358106.342:77): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1774358106.352:78): pid=1809 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358106.353:79): pid=1982 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=1982 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1774358106.354:80): pid=1982 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1774358106.398:81): pid=1809 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358106.398:82): pid=1809 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358106.399:83): pid=1809 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=1993 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358106.425:84): pid=1809 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358106.425:85): pid=1809 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358106.425:86): pid=1809 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1982 suid=1000 rport=37684 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358106.426:87): pid=1809 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=1982 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358106.427:88): pid=1809 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1774358106.427:89): pid=1809 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358106.427:90): pid=1809 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=1809 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=SERVICE_START msg=audit(1774358113.107:91): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kdump comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1774358113.578:92): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1774358114.234:93): pid=3953 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=3953 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1774358114.234:94): pid=3952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=3953 suid=74 rport=37706 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1774358114.234:95): pid=3952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=3953 suid=74 rport=37706 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1774358114.295:96): pid=3952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1774358114.295:97): pid=3952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1774358114.304:98): pid=3952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1774358114.304:99): pid=3952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3953 suid=74 rport=37706 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1774358114.306:100): pid=3952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1774358114.306:101): pid=3952 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=3 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1774358114.306:101): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffd9c4ec1a0 a2=4 a3=3e8 items=0 ppid=1166 pid=3952 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=3 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358114.306:101): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1774358114.306:102): pid=3952 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pam_selinux default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1774358114.329:103): pid=3952 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358114.330:104): pid=3955 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=3955 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1774358114.330:105): pid=3955 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1774358114.374:106): pid=3952 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358114.374:107): pid=3952 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358114.375:108): pid=3952 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=3956 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358114.424:109): pid=3952 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358114.424:110): pid=3952 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358114.424:111): pid=3952 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3955 suid=1000 rport=37706 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358114.425:112): pid=3952 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=3955 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358114.426:113): pid=3952 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1774358114.426:114): pid=3952 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358114.427:115): pid=3952 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=3952 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1774358114.445:116): pid=3974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=3974 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1774358114.446:117): pid=3973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=3974 suid=74 rport=37708 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1774358114.446:118): pid=3973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=3974 suid=74 rport=37708 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1774358114.508:119): pid=3973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1774358114.508:120): pid=3973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1774358114.516:121): pid=3973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1774358114.516:122): pid=3973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3974 suid=74 rport=37708 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1774358114.517:123): pid=3973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1774358114.517:124): pid=3973 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=4 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1774358114.517:124): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffe0cc00dd0 a2=4 a3=3e8 items=0 ppid=1166 pid=3973 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358114.517:124): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1774358114.518:125): pid=3973 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pam_selinux default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1774358114.540:126): pid=3973 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358114.541:127): pid=3976 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=3976 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1774358114.542:128): pid=3976 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1774358114.587:129): pid=3973 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358114.587:130): pid=3973 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358114.587:131): pid=3973 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=3977 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358114.631:132): pid=3973 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358114.631:133): pid=3973 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358114.631:134): pid=3973 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3976 suid=1000 rport=37708 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358114.631:135): pid=3973 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=3976 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358114.633:136): pid=3973 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1774358114.633:137): pid=3973 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358114.633:138): pid=3973 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=3973 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1774358114.649:139): pid=3995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=3995 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1774358114.649:140): pid=3994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=3995 suid=74 rport=37710 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1774358114.649:141): pid=3994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=3995 suid=74 rport=37710 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1774358114.710:142): pid=3994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1774358114.710:143): pid=3994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1774358114.719:144): pid=3994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1774358114.719:145): pid=3994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3995 suid=74 rport=37710 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1774358114.720:146): pid=3994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1774358114.720:147): pid=3994 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=5 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1774358114.720:147): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffc4471f8a0 a2=4 a3=3e8 items=0 ppid=1166 pid=3994 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=5 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358114.720:147): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1774358114.721:148): pid=3994 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pam_selinux default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1774358114.743:149): pid=3994 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358114.744:150): pid=3997 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=3997 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1774358114.745:151): pid=3997 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1774358114.790:152): pid=3994 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358114.790:153): pid=3994 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358114.791:154): pid=3994 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=3998 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1774358114.836:155): pid=4016 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1774358114.836:156): pid=4016 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=6370202D66202E2F7069702E636F6E66202F6574632F7069702E636F6E66 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1774358114.836:157): pid=4016 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1774358114.838:158): pid=4016 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358114.842:159): pid=4016 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1774358114.842:160): pid=4016 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_ACCT msg=audit(1774358114.851:161): pid=4019 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1774358114.851:162): pid=4019 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=6D6B646972202D70202F6574632F646F636B65722F exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1774358114.851:163): pid=4019 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1774358114.853:164): pid=4019 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358114.855:165): pid=4019 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1774358114.855:166): pid=4019 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_ACCT msg=audit(1774358114.863:167): pid=4022 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1774358114.863:168): pid=4022 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=6370202D66202E2F646F636B65722D6461656D6F6E2E6A736F6E202F6574632F646F636B65722F6461656D6F6E2E6A736F6E exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1774358114.864:169): pid=4022 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1774358114.865:170): pid=4022 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358114.868:171): pid=4022 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1774358114.868:172): pid=4022 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358114.870:173): pid=3994 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3997 suid=1000 rport=37710 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358114.870:174): pid=3994 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=3997 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358114.871:175): pid=3994 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1774358114.871:176): pid=3994 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1774358114.872:177): pid=3994 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358114.872:178): pid=3994 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358114.872:179): pid=3994 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=3994 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1774358114.886:180): pid=4026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=4026 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1774358114.886:181): pid=4025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=4026 suid=74 rport=37712 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1774358114.886:182): pid=4025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=4026 suid=74 rport=37712 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1774358114.946:183): pid=4025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1774358114.946:184): pid=4025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1774358114.954:185): pid=4025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1774358114.954:186): pid=4025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4026 suid=74 rport=37712 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1774358114.955:187): pid=4025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1774358114.955:188): pid=4025 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=6 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1774358114.955:188): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffd6c429ad0 a2=4 a3=3e8 items=0 ppid=1166 pid=4025 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=6 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358114.955:188): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1774358114.956:189): pid=4025 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pam_selinux default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1774358114.971:190): pid=4025 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358114.972:191): pid=4028 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=4028 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1774358114.972:192): pid=4028 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1774358115.014:193): pid=4025 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358115.014:194): pid=4025 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358115.015:195): pid=4025 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=4029 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358115.032:196): pid=4025 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358115.032:197): pid=4025 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358115.032:198): pid=4025 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4028 suid=1000 rport=37712 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358115.033:199): pid=4025 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=4028 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358115.034:200): pid=4025 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1774358115.034:201): pid=4025 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358115.034:202): pid=4025 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=4025 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1774358115.048:203): pid=4046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=4046 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1774358115.049:204): pid=4045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=4046 suid=74 rport=37714 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1774358115.049:205): pid=4045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=4046 suid=74 rport=37714 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1774358115.108:206): pid=4045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1774358115.108:207): pid=4045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1774358115.116:208): pid=4045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1774358115.116:209): pid=4045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4046 suid=74 rport=37714 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1774358115.119:210): pid=4045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1774358115.119:211): pid=4045 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=7 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1774358115.119:211): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffc30d24890 a2=4 a3=3e8 items=0 ppid=1166 pid=4045 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358115.119:211): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1774358115.119:212): pid=4045 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pam_selinux default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1774358115.139:213): pid=4045 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358115.140:214): pid=4048 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=4048 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1774358115.141:215): pid=4048 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1774358115.186:216): pid=4045 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358115.186:217): pid=4045 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358115.187:218): pid=4045 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=4049 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1774358115.215:219): pid=4069 uid=1000 auid=1000 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1774358115.215:220): pid=4069 uid=1000 auid=1000 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=657468746F6F6C202D4B2065746830207478206F6666 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1774358115.215:221): pid=4069 uid=1000 auid=1000 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1774358115.216:222): pid=4069 uid=1000 auid=1000 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358115.220:223): pid=4069 uid=1000 auid=1000 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1774358115.220:224): pid=4069 uid=1000 auid=1000 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358115.222:225): pid=4045 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358115.222:226): pid=4045 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358115.222:227): pid=4045 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4048 suid=1000 rport=37714 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358115.222:228): pid=4045 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=4048 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358115.223:229): pid=4045 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1774358115.223:230): pid=4045 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358115.224:231): pid=4045 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=4045 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1774358115.243:232): pid=4073 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=4073 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1774358115.243:233): pid=4072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=4073 suid=74 rport=37716 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1774358115.243:234): pid=4072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=4073 suid=74 rport=37716 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1774358115.302:235): pid=4072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1774358115.302:236): pid=4072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1774358115.310:237): pid=4072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1774358115.311:238): pid=4072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4073 suid=74 rport=37716 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1774358115.312:239): pid=4072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1774358115.312:240): pid=4072 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=8 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1774358115.312:240): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffd4d3e59c0 a2=4 a3=3e8 items=0 ppid=1166 pid=4072 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358115.312:240): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1774358115.313:241): pid=4072 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pam_selinux default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1774358115.335:242): pid=4072 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358115.336:243): pid=4075 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=4075 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1774358115.336:244): pid=4075 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1774358115.378:245): pid=4072 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358115.378:246): pid=4072 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358115.379:247): pid=4072 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=4076 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358115.422:248): pid=4072 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358115.422:249): pid=4072 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358115.422:250): pid=4072 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4075 suid=1000 rport=37716 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358115.422:251): pid=4072 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=4075 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358115.423:252): pid=4072 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1774358115.424:253): pid=4072 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358115.424:254): pid=4072 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=4072 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1774358115.438:255): pid=4094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=4094 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1774358115.439:256): pid=4093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=4094 suid=74 rport=37718 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1774358115.439:257): pid=4093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=4094 suid=74 rport=37718 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1774358115.500:258): pid=4093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1774358115.500:259): pid=4093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1774358115.508:260): pid=4093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1774358115.508:261): pid=4093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4094 suid=74 rport=37718 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1774358115.509:262): pid=4093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1774358115.509:263): pid=4093 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=9 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1774358115.509:263): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffd0b244740 a2=4 a3=3e8 items=0 ppid=1166 pid=4093 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358115.509:263): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1774358115.510:264): pid=4093 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pam_selinux default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1774358115.527:265): pid=4093 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358115.528:266): pid=4096 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=4096 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1774358115.529:267): pid=4096 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1774358115.575:268): pid=4093 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358115.575:269): pid=4093 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358115.575:270): pid=4093 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=4097 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1774358115.600:271): pid=4113 uid=1000 auid=1000 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1774358115.601:272): pid=4113 uid=1000 auid=1000 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=726D202D66202F6574632F79756D2E7265706F732E642F726F636B792D6164646F6E732E7265706F202F6574632F79756D2E7265706F732E642F726F636B792D646576656C2E7265706F202F6574632F79756D2E7265706F732E642F726F636B792D6578747261732E7265706F202F6574632F79756D2E7265706F732E642F726F636B792E7265706F exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1774358115.601:273): pid=4113 uid=1000 auid=1000 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1774358115.602:274): pid=4113 uid=1000 auid=1000 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358115.604:275): pid=4113 uid=1000 auid=1000 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1774358115.605:276): pid=4113 uid=1000 auid=1000 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_ACCT msg=audit(1774358115.614:277): pid=4097 uid=1000 auid=1000 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1774358115.614:278): pid=4097 uid=1000 auid=1000 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=6370206D6972726F722D626173652D726F636B79392E7265706F202F6574632F79756D2E7265706F732E642F exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1774358115.614:279): pid=4097 uid=1000 auid=1000 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1774358115.616:280): pid=4097 uid=1000 auid=1000 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358115.619:281): pid=4097 uid=1000 auid=1000 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1774358115.619:282): pid=4097 uid=1000 auid=1000 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358115.620:283): pid=4093 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358115.620:284): pid=4093 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358115.620:285): pid=4093 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4096 suid=1000 rport=37718 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358115.620:286): pid=4093 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=4096 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358115.621:287): pid=4093 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1774358115.622:288): pid=4093 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358115.622:289): pid=4093 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=4093 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1774358115.640:290): pid=4119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=4119 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1774358115.641:291): pid=4118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=4119 suid=74 rport=37720 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1774358115.641:292): pid=4118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=4119 suid=74 rport=37720 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1774358115.702:293): pid=4118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1774358115.702:294): pid=4118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1774358115.710:295): pid=4118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1774358115.711:296): pid=4118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4119 suid=74 rport=37720 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1774358115.712:297): pid=4118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1774358115.712:298): pid=4118 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=10 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1774358115.712:298): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffed4819d30 a2=4 a3=3e8 items=0 ppid=1166 pid=4118 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358115.712:298): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1774358115.712:299): pid=4118 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pam_selinux default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1774358115.734:300): pid=4118 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358115.735:301): pid=4121 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=4121 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1774358115.736:302): pid=4121 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1774358115.778:303): pid=4118 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358115.778:304): pid=4118 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358115.779:305): pid=4118 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=4122 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358115.822:306): pid=4118 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4121 suid=1000 rport=37720 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358115.823:307): pid=4118 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=4121 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358115.823:308): pid=4118 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1774358115.824:309): pid=4118 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1774358115.824:310): pid=4118 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358115.824:311): pid=4118 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358115.824:312): pid=4118 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=4118 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1774358115.838:313): pid=4140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=4140 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1774358115.839:314): pid=4139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=4140 suid=74 rport=37722 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1774358115.839:315): pid=4139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=4140 suid=74 rport=37722 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1774358115.898:316): pid=4139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1774358115.898:317): pid=4139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1774358115.907:318): pid=4139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1774358115.907:319): pid=4139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4140 suid=74 rport=37722 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1774358115.908:320): pid=4139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1774358115.908:321): pid=4139 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=11 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1774358115.908:321): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7fffad1ea2d0 a2=4 a3=3e8 items=0 ppid=1166 pid=4139 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358115.908:321): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1774358115.909:322): pid=4139 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pam_selinux default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1774358115.931:323): pid=4139 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358115.932:324): pid=4142 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=4142 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1774358115.933:325): pid=4142 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1774358115.978:326): pid=4139 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358115.978:327): pid=4139 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358115.979:328): pid=4139 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=4143 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1774358116.003:329): pid=4143 uid=1000 auid=1000 ses=11 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1774358116.003:330): pid=4143 uid=1000 auid=1000 ses=11 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=6370206D6972726F722D6570656C392E7265706F202F6574632F79756D2E7265706F732E642F exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1774358116.004:331): pid=4143 uid=1000 auid=1000 ses=11 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1774358116.005:332): pid=4143 uid=1000 auid=1000 ses=11 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358116.008:333): pid=4143 uid=1000 auid=1000 ses=11 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1774358116.009:334): pid=4143 uid=1000 auid=1000 ses=11 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358116.010:335): pid=4139 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4142 suid=1000 rport=37722 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358116.010:336): pid=4139 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=4142 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358116.012:337): pid=4139 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1774358116.012:338): pid=4139 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1774358116.012:339): pid=4139 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358116.013:340): pid=4139 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358116.013:341): pid=4139 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=4139 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1774358116.027:342): pid=4162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=4162 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1774358116.028:343): pid=4161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=4162 suid=74 rport=37724 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1774358116.028:344): pid=4161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=4162 suid=74 rport=37724 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1774358116.088:345): pid=4161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1774358116.088:346): pid=4161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1774358116.096:347): pid=4161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1774358116.096:348): pid=4161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4162 suid=74 rport=37724 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1774358116.098:349): pid=4161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1774358116.098:350): pid=4161 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=12 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1774358116.098:350): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffd4fe17460 a2=4 a3=3e8 items=0 ppid=1166 pid=4161 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358116.098:350): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1774358116.098:351): pid=4161 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pam_selinux default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1774358116.115:352): pid=4161 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358116.116:353): pid=4164 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=4164 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1774358116.117:354): pid=4164 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1774358116.162:355): pid=4161 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358116.162:356): pid=4161 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358116.163:357): pid=4161 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=4165 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1774358116.187:358): pid=4182 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1774358116.187:359): pid=4182 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=746565202D61202F6574632F737973636F6E6669672F6E6574776F726B2D736372697074732F69666366672D65746831 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1774358116.187:360): pid=4182 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1774358116.188:361): pid=4182 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358116.190:362): pid=4182 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1774358116.190:363): pid=4182 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_ACCT msg=audit(1774358116.199:364): pid=4165 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1774358116.199:365): pid=4165 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=73797374656D63746C2072657374617274204E6574776F726B4D616E616765722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1774358116.200:366): pid=4165 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1774358116.201:367): pid=4165 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=SERVICE_STOP msg=audit(1774358116.208:368): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1774358116.228:369): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1774358116.230:370): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1774358116.276:371): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1774358116.279:372): pid=4165 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1774358116.280:373): pid=4165 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358116.282:374): pid=4161 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358116.282:375): pid=4161 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358116.282:376): pid=4161 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4164 suid=1000 rport=37724 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358116.282:377): pid=4161 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=4164 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358116.285:378): pid=4161 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1774358116.285:379): pid=4161 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358116.285:380): pid=4161 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=4161 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1774358116.298:381): pid=4226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=4226 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1774358116.298:382): pid=4218 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=4226 suid=74 rport=37726 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1774358116.298:383): pid=4218 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=4226 suid=74 rport=37726 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1774358116.364:384): pid=4218 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1774358116.364:385): pid=4218 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1774358116.372:386): pid=4218 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1774358116.373:387): pid=4218 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4226 suid=74 rport=37726 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1774358116.374:388): pid=4218 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1774358116.374:389): pid=4218 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=13 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1774358116.374:389): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffcd88567d0 a2=4 a3=3e8 items=0 ppid=1166 pid=4218 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358116.374:389): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1774358116.375:390): pid=4218 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pam_selinux default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1774358116.393:391): pid=4218 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358116.393:392): pid=4247 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=4247 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1774358116.394:393): pid=4247 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1774358116.439:394): pid=4218 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358116.439:395): pid=4218 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358116.440:396): pid=4218 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=4248 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1774358116.465:397): pid=4248 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1774358116.465:398): pid=4248 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=6D6F6470726F62652069705F7461626C6573 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1774358116.465:399): pid=4248 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1774358116.467:400): pid=4248 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358116.478:401): pid=4248 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1774358116.478:402): pid=4248 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358116.479:403): pid=4218 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358116.479:404): pid=4218 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358116.480:405): pid=4218 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4247 suid=1000 rport=37726 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358116.480:406): pid=4218 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=4247 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358116.481:407): pid=4218 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1774358116.481:408): pid=4218 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358116.482:409): pid=4218 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=4218 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1774358116.496:410): pid=4270 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=4270 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1774358116.496:411): pid=4268 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=4270 suid=74 rport=37728 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1774358116.496:412): pid=4268 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=4270 suid=74 rport=37728 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1774358116.557:413): pid=4268 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1774358116.557:414): pid=4268 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1774358116.566:415): pid=4268 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1774358116.566:416): pid=4268 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4270 suid=74 rport=37728 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1774358116.567:417): pid=4268 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1774358116.567:418): pid=4268 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=14 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1774358116.567:418): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7fff28355170 a2=4 a3=3e8 items=0 ppid=1166 pid=4268 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358116.567:418): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1774358116.568:419): pid=4268 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pam_selinux default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1774358116.592:420): pid=4268 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358116.593:421): pid=4272 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=4272 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1774358116.593:422): pid=4272 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1774358116.639:423): pid=4268 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358116.639:424): pid=4268 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358116.639:425): pid=4268 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=4273 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1774358116.663:426): pid=4273 uid=1000 auid=1000 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1774358116.663:427): pid=4273 uid=1000 auid=1000 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=646E6620696E7374616C6C202D79206F70656E7373682D736572766572206F70656E73736C exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1774358116.664:428): pid=4273 uid=1000 auid=1000 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1774358116.665:429): pid=4273 uid=1000 auid=1000 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=SERVICE_START msg=audit(1774358123.912:430): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1774358133.947:431): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1774358140.978:432): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r1df17badf8fc4341a5562882e40df8de comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1774358141.133:433): prog-id=29 op=LOAD
type=BPF msg=audit(1774358141.133:434): prog-id=15 op=UNLOAD
type=BPF msg=audit(1774358141.133:435): prog-id=30 op=LOAD
type=BPF msg=audit(1774358141.133:436): prog-id=31 op=LOAD
type=BPF msg=audit(1774358141.133:437): prog-id=16 op=UNLOAD
type=BPF msg=audit(1774358141.133:438): prog-id=17 op=UNLOAD
type=BPF msg=audit(1774358141.133:439): prog-id=32 op=LOAD
type=BPF msg=audit(1774358141.133:440): prog-id=33 op=LOAD
type=BPF msg=audit(1774358141.133:441): prog-id=27 op=UNLOAD
type=BPF msg=audit(1774358141.133:442): prog-id=28 op=UNLOAD
type=BPF msg=audit(1774358141.134:443): prog-id=34 op=LOAD
type=BPF msg=audit(1774358141.134:444): prog-id=35 op=LOAD
type=BPF msg=audit(1774358141.134:445): prog-id=18 op=UNLOAD
type=BPF msg=audit(1774358141.134:446): prog-id=19 op=UNLOAD
type=BPF msg=audit(1774358141.135:447): prog-id=36 op=LOAD
type=BPF msg=audit(1774358141.135:448): prog-id=37 op=LOAD
type=BPF msg=audit(1774358141.135:449): prog-id=22 op=UNLOAD
type=BPF msg=audit(1774358141.135:450): prog-id=23 op=UNLOAD
type=BPF msg=audit(1774358141.136:451): prog-id=38 op=LOAD
type=BPF msg=audit(1774358141.136:452): prog-id=20 op=UNLOAD
type=BPF msg=audit(1774358141.138:453): prog-id=39 op=LOAD
type=BPF msg=audit(1774358141.138:454): prog-id=24 op=UNLOAD
type=BPF msg=audit(1774358141.138:455): prog-id=40 op=LOAD
type=BPF msg=audit(1774358141.138:456): prog-id=41 op=LOAD
type=BPF msg=audit(1774358141.138:457): prog-id=25 op=UNLOAD
type=BPF msg=audit(1774358141.138:458): prog-id=26 op=UNLOAD
type=BPF msg=audit(1774358141.139:459): prog-id=42 op=LOAD
type=BPF msg=audit(1774358141.139:460): prog-id=21 op=UNLOAD
type=CRYPTO_KEY_USER msg=audit(1774358141.154:461): pid=1166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=1166 suid=0  exe=2F7573722F7362696E2F73736864202864656C6574656429 hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=SERVICE_STOP msg=audit(1774358141.155:462): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1774358141.174:463): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1774358141.198:464): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r9b93d640d3934bb3a4daa879ca75bfa3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SOFTWARE_UPDATE msg=audit(1774358141.202:465): pid=4290 uid=0 auid=1000 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="openssl-libs-1:3.5.1-7.el9_7.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358141.202:466): pid=4290 uid=0 auid=1000 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="openssl-fips-provider-1:3.5.1-7.el9_7.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358141.202:467): pid=4290 uid=0 auid=1000 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="openssh-8.7p1-47.el9_7.rocky.0.1.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358141.202:468): pid=4290 uid=0 auid=1000 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="openssh-clients-8.7p1-47.el9_7.rocky.0.1.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358141.202:469): pid=4290 uid=0 auid=1000 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="openssh-server-8.7p1-47.el9_7.rocky.0.1.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358141.203:470): pid=4290 uid=0 auid=1000 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="openssl-1:3.5.1-7.el9_7.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SERVICE_START msg=audit(1774358141.675:471): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=polkit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1774358141.677:472): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=packagekit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1774358141.842:473): pid=4273 uid=1000 auid=1000 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1774358141.842:474): pid=4273 uid=1000 auid=1000 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358141.844:475): pid=4268 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358141.844:476): pid=4268 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358141.844:477): pid=4268 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4272 suid=1000 rport=37728 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358141.844:478): pid=4268 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=4272 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358141.846:479): pid=4268 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1774358141.846:480): pid=4268 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358141.846:481): pid=4268 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=4268 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1774358141.863:482): pid=6383 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=6383 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1774358141.864:483): pid=6358 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=6383 suid=74 rport=37730 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1774358141.864:484): pid=6358 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=6383 suid=74 rport=37730 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1774358141.924:485): pid=6358 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1774358141.924:486): pid=6358 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1774358141.933:487): pid=6358 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1774358141.933:488): pid=6358 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6383 suid=74 rport=37730 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1774358141.934:489): pid=6358 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1774358141.934:490): pid=6358 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=15 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1774358141.934:490): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7fff176bf840 a2=4 a3=3e8 items=0 ppid=4703 pid=6358 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358141.934:490): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1774358141.934:491): pid=6358 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pam_selinux default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1774358141.952:492): pid=6358 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358141.953:493): pid=6601 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=6601 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1774358141.954:494): pid=6601 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1774358141.998:495): pid=6358 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358141.998:496): pid=6358 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358141.999:497): pid=6358 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=6719 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358142.018:498): pid=6358 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358142.018:499): pid=6358 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358142.018:500): pid=6358 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6601 suid=1000 rport=37730 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358142.018:501): pid=6358 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=6601 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358142.019:502): pid=6358 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1774358142.020:503): pid=6358 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358142.020:504): pid=6358 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=6358 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1774358142.036:505): pid=6820 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=6820 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1774358142.037:506): pid=6795 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=6820 suid=74 rport=37732 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1774358142.037:507): pid=6795 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=6820 suid=74 rport=37732 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1774358142.096:508): pid=6795 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1774358142.096:509): pid=6795 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1774358142.104:510): pid=6795 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1774358142.104:511): pid=6795 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6820 suid=74 rport=37732 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1774358142.105:512): pid=6795 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1774358142.105:513): pid=6795 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=16 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1774358142.105:513): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7fffe8116550 a2=4 a3=3e8 items=0 ppid=4703 pid=6795 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358142.105:513): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1774358142.106:514): pid=6795 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pam_selinux default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1774358142.120:515): pid=6795 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358142.121:516): pid=7030 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=7030 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1774358142.122:517): pid=7030 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1774358142.166:518): pid=6795 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358142.166:519): pid=6795 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358142.166:520): pid=6795 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=7153 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358142.183:521): pid=6795 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358142.183:522): pid=6795 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358142.183:523): pid=6795 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7030 suid=1000 rport=37732 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358142.183:524): pid=6795 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=7030 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358142.184:525): pid=6795 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1774358142.184:526): pid=6795 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358142.184:527): pid=6795 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=6795 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=SERVICE_START msg=audit(1774358145.841:528): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1774358145.841:529): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1774358145.861:530): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r1df17badf8fc4341a5562882e40df8de comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1774358145.862:531): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r9b93d640d3934bb3a4daa879ca75bfa3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1774358147.289:532): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1774358147.317:533): prog-id=33 op=UNLOAD
type=BPF msg=audit(1774358147.317:534): prog-id=32 op=UNLOAD
type=SERVICE_STOP msg=audit(1774358152.416:535): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1774358152.437:536): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1774358165.740:537): pid=14743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=14743 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1774358165.741:538): pid=14742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=14743 suid=74 rport=37772 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1774358165.741:539): pid=14742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=14743 suid=74 rport=37772 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1774358165.801:540): pid=14742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1774358165.801:541): pid=14742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1774358165.809:542): pid=14742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1774358165.809:543): pid=14742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14743 suid=74 rport=37772 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1774358165.810:544): pid=14742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1774358165.810:545): pid=14742 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=17 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1774358165.810:545): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffe224e4a90 a2=4 a3=3e8 items=0 ppid=4703 pid=14742 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358165.810:545): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1774358165.811:546): pid=14742 uid=0 auid=1000 ses=17 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pam_selinux default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=SERVICE_START msg=audit(1774358165.838:547): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1774358165.863:548): pid=14746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_ACQ msg=audit(1774358165.863:549): pid=14746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="rocky" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_ROLE_CHANGE msg=audit(1774358165.863:550): pid=14746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=pam_selinux default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1774358165.863:551): pid=14746 uid=0 subj=system_u:system_r:init_t:s0 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=18 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1774358165.863:551): arch=c000003e syscall=1 success=yes exit=4 a0=7 a1=7ffea224e290 a2=4 a3=3e8 items=0 ppid=1 pid=14746 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="(systemd)" exe="/usr/lib/systemd/systemd" subj=system_u:system_r:init_t:s0 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358165.863:551): proctitle="(systemd)"
type=USER_START msg=audit(1774358165.865:552): pid=14746 uid=0 auid=1000 ses=18 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_umask,pam_namespace,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="rocky" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SERVICE_START msg=audit(1774358165.963:553): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1774358165.968:554): pid=14742 uid=0 auid=1000 ses=17 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358165.969:555): pid=14755 uid=0 auid=1000 ses=17 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=14755 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1774358165.970:556): pid=14755 uid=0 auid=1000 ses=17 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1774358166.014:557): pid=14742 uid=0 auid=1000 ses=17 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358166.014:558): pid=14742 uid=0 auid=1000 ses=17 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358166.015:559): pid=14742 uid=0 auid=1000 ses=17 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=14756 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358166.033:560): pid=14742 uid=0 auid=1000 ses=17 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358166.033:561): pid=14742 uid=0 auid=1000 ses=17 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358166.033:562): pid=14742 uid=0 auid=1000 ses=17 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14755 suid=1000 rport=37772 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358166.033:563): pid=14742 uid=0 auid=1000 ses=17 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=14755 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358166.034:564): pid=14742 uid=0 auid=1000 ses=17 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1774358166.034:565): pid=14742 uid=0 auid=1000 ses=17 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358166.035:566): pid=14742 uid=0 auid=1000 ses=17 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=14742 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1774358166.052:567): pid=14774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=14774 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1774358166.053:568): pid=14773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=14774 suid=74 rport=37774 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1774358166.053:569): pid=14773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=14774 suid=74 rport=37774 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1774358166.111:570): pid=14773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1774358166.111:571): pid=14773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1774358166.119:572): pid=14773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1774358166.119:573): pid=14773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14774 suid=74 rport=37774 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1774358166.120:574): pid=14773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1774358166.121:575): pid=14773 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=19 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1774358166.121:575): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffd4b10d7a0 a2=4 a3=3e8 items=0 ppid=4703 pid=14773 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358166.121:575): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1774358166.121:576): pid=14773 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pam_selinux default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1774358166.140:577): pid=14773 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358166.141:578): pid=14776 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=14776 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1774358166.142:579): pid=14776 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1774358166.186:580): pid=14773 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358166.186:581): pid=14773 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358166.187:582): pid=14773 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=14777 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358166.209:583): pid=14773 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358166.209:584): pid=14773 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358166.209:585): pid=14773 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14776 suid=1000 rport=37774 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358166.209:586): pid=14773 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=14776 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358166.210:587): pid=14773 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1774358166.211:588): pid=14773 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358166.211:589): pid=14773 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=14773 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1774358166.232:590): pid=14794 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=14794 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1774358166.232:591): pid=14793 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=14794 suid=74 rport=37776 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1774358166.233:592): pid=14793 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=14794 suid=74 rport=37776 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1774358166.292:593): pid=14793 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1774358166.292:594): pid=14793 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1774358166.300:595): pid=14793 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1774358166.300:596): pid=14793 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14794 suid=74 rport=37776 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1774358166.301:597): pid=14793 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1774358166.301:598): pid=14793 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=20 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1774358166.301:598): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffc2b6f47c0 a2=4 a3=3e8 items=0 ppid=4703 pid=14793 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358166.301:598): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1774358166.302:599): pid=14793 uid=0 auid=1000 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pam_selinux default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1774358166.325:600): pid=14793 uid=0 auid=1000 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358166.326:601): pid=14796 uid=0 auid=1000 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=14796 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1774358166.327:602): pid=14796 uid=0 auid=1000 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1774358166.370:603): pid=14793 uid=0 auid=1000 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358166.370:604): pid=14793 uid=0 auid=1000 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358166.371:605): pid=14793 uid=0 auid=1000 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=14797 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358166.394:606): pid=14793 uid=0 auid=1000 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358166.394:607): pid=14793 uid=0 auid=1000 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358166.394:608): pid=14793 uid=0 auid=1000 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14796 suid=1000 rport=37776 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358166.395:609): pid=14793 uid=0 auid=1000 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=14796 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358166.396:610): pid=14793 uid=0 auid=1000 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1774358166.396:611): pid=14793 uid=0 auid=1000 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358166.396:612): pid=14793 uid=0 auid=1000 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=14793 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1774358166.413:613): pid=14814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=14814 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1774358166.414:614): pid=14813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=14814 suid=74 rport=37778 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1774358166.414:615): pid=14813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=14814 suid=74 rport=37778 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1774358166.474:616): pid=14813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1774358166.474:617): pid=14813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1774358166.482:618): pid=14813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1774358166.482:619): pid=14813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14814 suid=74 rport=37778 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1774358166.483:620): pid=14813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1774358166.483:621): pid=14813 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=21 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1774358166.483:621): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7fff626be330 a2=4 a3=3e8 items=0 ppid=4703 pid=14813 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358166.483:621): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1774358166.484:622): pid=14813 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pam_selinux default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1774358166.501:623): pid=14813 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358166.502:624): pid=14816 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=14816 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1774358166.503:625): pid=14816 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1774358166.546:626): pid=14813 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358166.546:627): pid=14813 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358166.547:628): pid=14813 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=14817 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358166.565:629): pid=14813 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358166.565:630): pid=14813 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358166.566:631): pid=14813 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14816 suid=1000 rport=37778 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358166.566:632): pid=14813 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=14816 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358166.567:633): pid=14813 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1774358166.567:634): pid=14813 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358166.567:635): pid=14813 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=14813 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1774358166.586:636): pid=14836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=14836 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1774358166.587:637): pid=14835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=14836 suid=74 rport=37780 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1774358166.587:638): pid=14835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=14836 suid=74 rport=37780 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1774358166.645:639): pid=14835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1774358166.645:640): pid=14835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1774358166.653:641): pid=14835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1774358166.653:642): pid=14835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14836 suid=74 rport=37780 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1774358166.654:643): pid=14835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1774358166.654:644): pid=14835 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=22 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1774358166.654:644): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffc283a68a0 a2=4 a3=3e8 items=0 ppid=4703 pid=14835 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358166.654:644): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1774358166.655:645): pid=14835 uid=0 auid=1000 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pam_selinux default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1774358166.668:646): pid=14835 uid=0 auid=1000 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358166.669:647): pid=14838 uid=0 auid=1000 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=14838 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1774358166.670:648): pid=14838 uid=0 auid=1000 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1774358166.714:649): pid=14835 uid=0 auid=1000 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358166.714:650): pid=14835 uid=0 auid=1000 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358166.715:651): pid=14835 uid=0 auid=1000 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=14839 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358166.731:652): pid=14835 uid=0 auid=1000 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358166.731:653): pid=14835 uid=0 auid=1000 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358166.731:654): pid=14835 uid=0 auid=1000 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14838 suid=1000 rport=37780 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358166.731:655): pid=14835 uid=0 auid=1000 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=14838 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358166.733:656): pid=14835 uid=0 auid=1000 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1774358166.733:657): pid=14835 uid=0 auid=1000 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358166.733:658): pid=14835 uid=0 auid=1000 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=14835 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1774358166.754:659): pid=14856 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=14856 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1774358166.754:660): pid=14855 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=14856 suid=74 rport=37782 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1774358166.754:661): pid=14855 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=14856 suid=74 rport=37782 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1774358166.815:662): pid=14855 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1774358166.815:663): pid=14855 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1774358166.823:664): pid=14855 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1774358166.823:665): pid=14855 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14856 suid=74 rport=37782 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1774358166.824:666): pid=14855 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1774358166.824:667): pid=14855 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=23 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1774358166.824:667): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffc0b784da0 a2=4 a3=3e8 items=0 ppid=4703 pid=14855 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358166.824:667): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1774358166.825:668): pid=14855 uid=0 auid=1000 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pam_selinux default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1774358166.849:669): pid=14855 uid=0 auid=1000 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358166.850:670): pid=14858 uid=0 auid=1000 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=14858 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1774358166.851:671): pid=14858 uid=0 auid=1000 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1774358166.894:672): pid=14855 uid=0 auid=1000 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358166.894:673): pid=14855 uid=0 auid=1000 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358166.895:674): pid=14855 uid=0 auid=1000 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=14859 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1774358166.927:675): pid=14859 uid=1000 auid=1000 ses=23 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1774358166.927:676): pid=14859 uid=1000 auid=1000 ses=23 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=62617368202D63207072696E746620225C6E31302E302E302E323220202020636E2D6A656E6B696E732D6465706C6F792D706C6174666F726D2D616E7369626C652D6B38732D3435372D315C6E22203E3E202F6574632F686F737473 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1774358166.928:677): pid=14859 uid=1000 auid=1000 ses=23 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1774358166.931:678): pid=14859 uid=1000 auid=1000 ses=23 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358166.934:679): pid=14859 uid=1000 auid=1000 ses=23 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1774358166.934:680): pid=14859 uid=1000 auid=1000 ses=23 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358166.935:681): pid=14855 uid=0 auid=1000 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14858 suid=1000 rport=37782 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358166.936:682): pid=14855 uid=0 auid=1000 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=14858 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358166.937:683): pid=14855 uid=0 auid=1000 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1774358166.937:684): pid=14855 uid=0 auid=1000 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1774358166.938:685): pid=14855 uid=0 auid=1000 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358166.938:686): pid=14855 uid=0 auid=1000 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358166.938:687): pid=14855 uid=0 auid=1000 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=14855 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1774358168.635:688): pid=14878 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=14878 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1774358168.636:689): pid=14877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=14878 suid=74 rport=37786 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1774358168.636:690): pid=14877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=14878 suid=74 rport=37786 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1774358168.697:691): pid=14877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1774358168.697:692): pid=14877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1774358168.705:693): pid=14877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1774358168.705:694): pid=14877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14878 suid=74 rport=37786 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1774358168.706:695): pid=14877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1774358168.706:696): pid=14877 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=24 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1774358168.706:696): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffc6a32a500 a2=4 a3=3e8 items=0 ppid=4703 pid=14877 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358168.706:696): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1774358168.707:697): pid=14877 uid=0 auid=1000 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pam_selinux default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1774358168.725:698): pid=14877 uid=0 auid=1000 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358168.726:699): pid=14880 uid=0 auid=1000 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=14880 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1774358168.726:700): pid=14880 uid=0 auid=1000 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1774358168.770:701): pid=14877 uid=0 auid=1000 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358168.770:702): pid=14877 uid=0 auid=1000 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358168.771:703): pid=14877 uid=0 auid=1000 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=14881 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358168.928:704): pid=14877 uid=0 auid=1000 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358168.928:705): pid=14877 uid=0 auid=1000 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358168.928:706): pid=14877 uid=0 auid=1000 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14880 suid=1000 rport=37786 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358168.928:707): pid=14877 uid=0 auid=1000 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=14880 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358168.929:708): pid=14877 uid=0 auid=1000 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1774358168.929:709): pid=14877 uid=0 auid=1000 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358168.930:710): pid=14877 uid=0 auid=1000 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=14877 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1774358168.944:711): pid=14899 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=14899 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1774358168.945:712): pid=14898 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=14899 suid=74 rport=37788 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1774358168.945:713): pid=14898 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=14899 suid=74 rport=37788 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1774358169.006:714): pid=14898 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1774358169.006:715): pid=14898 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1774358169.014:716): pid=14898 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1774358169.015:717): pid=14898 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14899 suid=74 rport=37788 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1774358169.016:718): pid=14898 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1774358169.016:719): pid=14898 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=25 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1774358169.016:719): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffff2e229b0 a2=4 a3=3e8 items=0 ppid=4703 pid=14898 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358169.016:719): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1774358169.016:720): pid=14898 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pam_selinux default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1774358169.033:721): pid=14898 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358169.034:722): pid=14901 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=14901 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1774358169.034:723): pid=14901 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1774358169.078:724): pid=14898 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358169.078:725): pid=14898 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358169.079:726): pid=14898 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=14902 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1774358169.161:727): pid=14976 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1774358169.161:728): pid=14976 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=646E6620636865636B2D757064617465 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1774358169.162:729): pid=14976 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1774358169.163:730): pid=14976 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358169.774:731): pid=14976 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1774358169.774:732): pid=14976 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_ACCT msg=audit(1774358169.784:733): pid=14979 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1774358169.784:734): pid=14979 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=646E6620696E7374616C6C202D79206375726C20707974686F6E3320707974686F6E332D7365747570746F6F6C73206C696273656C696E75782D707974686F6E33206970726F757465206A712062696E642D7574696C7320707974686F6E332D706970206F70656E7373682D736572766572206F70656E7373682D636C69656E747320707974686F6E332D7669727475616C656E76 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1774358169.784:735): pid=14979 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1774358169.786:736): pid=14979 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=SERVICE_STOP msg=audit(1774358172.675:737): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=crond comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1774358172.685:738): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=crond comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1774358174.264:739): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-rc2e08f9735f345cc8eb311004c261277 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1774358174.280:740): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r0ad51812c5b34172b2c1369eb7574884 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SOFTWARE_UPDATE msg=audit(1774358174.294:741): pid=14981 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="python3-libs-3.9.25-3.el9_7.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe=2F7573722F62696E2F707974686F6E332E39202864656C6574656429 hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358174.294:742): pid=14981 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="python-unversioned-command-3.9.25-3.el9_7.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe=2F7573722F62696E2F707974686F6E332E39202864656C6574656429 hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358174.294:743): pid=14981 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="python3-3.9.25-3.el9_7.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe=2F7573722F62696E2F707974686F6E332E39202864656C6574656429 hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358174.294:744): pid=14981 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="libselinux-3.6-3.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe=2F7573722F62696E2F707974686F6E332E39202864656C6574656429 hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358174.294:745): pid=14981 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="protobuf-c-1.3.3-13.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe=2F7573722F62696E2F707974686F6E332E39202864656C6574656429 hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358174.294:746): pid=14981 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="iproute-6.14.0-2.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe=2F7573722F62696E2F707974686F6E332E39202864656C6574656429 hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358174.294:747): pid=14981 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-distlib-0.3.2-1.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="dnf" exe=2F7573722F62696E2F707974686F6E332E39202864656C6574656429 hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358174.294:748): pid=14981 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-filelock-3.7.1-1.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="dnf" exe=2F7573722F62696E2F707974686F6E332E39202864656C6574656429 hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358174.294:749): pid=14981 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-platformdirs-2.5.4-1.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="dnf" exe=2F7573722F62696E2F707974686F6E332E39202864656C6574656429 hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358174.294:750): pid=14981 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="python3-setuptools-53.0.0-15.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe=2F7573722F62696E2F707974686F6E332E39202864656C6574656429 hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358174.294:751): pid=14981 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="libcurl-7.76.1-35.el9_7.3.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe=2F7573722F62696E2F707974686F6E332E39202864656C6574656429 hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358174.294:752): pid=14981 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-wheel-wheel-1:0.36.2-8.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe=2F7573722F62696E2F707974686F6E332E39202864656C6574656429 hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358174.294:753): pid=14981 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libuv-1:1.42.0-2.el9_4.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe=2F7573722F62696E2F707974686F6E332E39202864656C6574656429 hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358174.294:754): pid=14981 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="fstrm-0.6.1-3.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe=2F7573722F62696E2F707974686F6E332E39202864656C6574656429 hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358174.294:755): pid=14981 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="bind-license-32:9.16.23-34.el9_7.1.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe=2F7573722F62696E2F707974686F6E332E39202864656C6574656429 hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358174.294:756): pid=14981 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="bind-libs-32:9.16.23-34.el9_7.1.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe=2F7573722F62696E2F707974686F6E332E39202864656C6574656429 hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358174.294:757): pid=14981 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="bind-utils-32:9.16.23-34.el9_7.1.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe=2F7573722F62696E2F707974686F6E332E39202864656C6574656429 hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358174.294:758): pid=14981 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-virtualenv-20.21.1-16.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="dnf" exe=2F7573722F62696E2F707974686F6E332E39202864656C6574656429 hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358174.294:759): pid=14981 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="curl-7.76.1-35.el9_7.3.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe=2F7573722F62696E2F707974686F6E332E39202864656C6574656429 hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358174.294:760): pid=14981 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-pip-21.3.1-1.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe=2F7573722F62696E2F707974686F6E332E39202864656C6574656429 hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358174.294:761): pid=14981 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="iproute-tc-6.14.0-2.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe=2F7573722F62696E2F707974686F6E332E39202864656C6574656429 hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358174.294:762): pid=14981 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="libselinux-utils-3.6-3.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe=2F7573722F62696E2F707974686F6E332E39202864656C6574656429 hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358174.294:763): pid=14981 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="python3-libselinux-3.6-3.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe=2F7573722F62696E2F707974686F6E332E39202864656C6574656429 hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358174.294:764): pid=14981 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="jq-1.6-19.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe=2F7573722F62696E2F707974686F6E332E39202864656C6574656429 hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1774358175.407:765): pid=14979 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1774358175.407:766): pid=14979 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=SERVICE_START msg=audit(1774358175.566:767): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1774358175.566:768): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1774358175.592:769): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-rc2e08f9735f345cc8eb311004c261277 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1774358175.593:770): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r0ad51812c5b34172b2c1369eb7574884 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1774358287.005:771): pid=16250 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1774358287.005:772): pid=16250 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=726D202D7266202F686F6D652F726F636B792F74662D616E7369626C652D6465706C6F796572 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1774358287.006:773): pid=16250 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1774358287.008:774): pid=16250 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358287.010:775): pid=16250 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1774358287.010:776): pid=16250 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_ACCT msg=audit(1774358290.058:777): pid=16373 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1774358290.058:778): pid=16373 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky/tf-ansible-deployer/playbooks" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D686F7974667A67646974736B7A6A67716E79727071616262676E6277646A7366203B205049505F425245414B5F53595354454D5F5041434B414745533D31202F686F6D652F726F636B792F2E76656E762F62696E2F707974686F6E33202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313737343335383239302E303330383938362D31363336312D36343735333537383937353730312F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1774358290.058:779): pid=16373 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1774358290.060:780): pid=16373 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358293.242:781): pid=16373 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1774358293.243:782): pid=16373 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358299.053:783): pid=16562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=16562 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1774358299.054:784): pid=16561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=16562 suid=74 rport=50134 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1774358299.054:785): pid=16561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=16562 suid=74 rport=50134 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1774358300.788:786): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sssd-kcm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1774358300.819:787): pid=16561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1774358300.819:788): pid=16561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:49:05:ad:59:7a:57:9b:0c:99:ce:99:12:1e:0e:5b:17:c9:d5:b5:24:d1:86:fd:c7:85:48:7b:09:bb:7a:b4:bf exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1774358300.828:789): pid=16561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.22 addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1774358300.829:790): pid=16561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16562 suid=74 rport=50134 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1774358300.829:791): pid=16561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.22 addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1774358300.829:792): pid=16561 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=26 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1774358300.829:792): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffd1c9962c0 a2=4 a3=3e8 items=0 ppid=4703 pid=16561 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358300.829:792): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1774358300.830:793): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pam_selinux default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.22 addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1774358300.848:794): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.22 addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358300.849:795): pid=16569 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=16569 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1774358300.850:796): pid=16569 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.22 addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1774358300.891:797): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358300.891:798): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358300.892:799): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=16570 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358300.913:800): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358300.913:801): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358300.924:802): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358300.924:803): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358300.925:804): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=16587 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358300.949:805): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358300.949:806): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358300.959:807): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358300.959:808): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358300.959:809): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=16610 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358300.978:810): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358300.978:811): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358300.987:812): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358300.987:813): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358300.988:814): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=16629 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358301.030:815): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358301.030:816): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358301.044:817): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358301.044:818): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358301.045:819): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=16648 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358301.080:820): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358301.080:821): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358301.088:822): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358301.088:823): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358301.089:824): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=16665 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358301.107:825): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358301.107:826): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358301.117:827): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358301.117:828): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358301.117:829): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=16683 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1774358301.146:830): pid=16701 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1774358301.146:831): pid=16701 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D767A7A67776D616C6E7A756D656E7572666977797767706D6A736265776C7667203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313737343335383330302E393135393437372D31363535392D38303334323533353133373133302F416E736962616C6C5A5F73657475702E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1774358301.147:832): pid=16701 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1774358301.148:833): pid=16701 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358301.705:834): pid=16701 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1774358301.705:835): pid=16701 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358301.707:836): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358301.707:837): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358301.718:838): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358301.718:839): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358301.719:840): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=16738 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358301.737:841): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358301.737:842): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358301.943:843): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358301.943:844): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358301.944:845): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=16760 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358301.962:846): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358301.962:847): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358301.970:848): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358301.970:849): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358301.971:850): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=16777 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358301.991:851): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358301.991:852): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358302.005:853): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358302.005:854): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358302.006:855): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=16801 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358302.033:856): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358302.033:857): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358302.042:858): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358302.042:859): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358302.042:860): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=16818 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358302.060:861): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358302.060:862): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358302.072:863): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358302.072:864): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358302.073:865): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=16836 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1774358302.099:866): pid=16854 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1774358302.099:867): pid=16854 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A7A75707A616F716E6D6E6A7879736B726F6F756D64666D73626F756E636E73203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313737343335383330312E393634313333332D31363735382D3130383738343533313838333239372F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1774358302.100:868): pid=16854 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1774358302.101:869): pid=16854 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358302.466:870): pid=16854 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1774358302.466:871): pid=16854 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358302.468:872): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358302.468:873): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358302.477:874): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358302.477:875): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358302.477:876): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=16859 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358302.496:877): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358302.496:878): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358302.707:879): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358302.707:880): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358302.708:881): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=16883 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358302.725:882): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358302.725:883): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358302.733:884): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358302.733:885): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358302.734:886): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=16900 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358302.755:887): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358302.755:888): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358302.768:889): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358302.768:890): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358302.769:891): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=16924 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358302.795:892): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358302.795:893): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358302.804:894): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358302.804:895): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358302.805:896): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=16941 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358302.823:897): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358302.823:898): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358302.832:899): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358302.832:900): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358302.833:901): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=16959 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1774358302.859:902): pid=16977 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1774358302.859:903): pid=16977 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D79637975697275656B6965686D6B756A6C6E626F69787761766764676B696C70203B2068747470735F70726F78793D272720687474705F70726F78793D2727205049505F425245414B5F53595354454D5F5041434B414745533D31202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313737343335383330322E3732373531392D31363838312D3236353538383931313536363438382F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1774358302.859:904): pid=16977 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1774358302.860:905): pid=16977 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358303.387:906): pid=16977 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1774358303.388:907): pid=16977 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358303.390:908): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358303.390:909): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358303.399:910): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358303.399:911): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358303.399:912): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=16984 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358303.418:913): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358303.418:914): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358304.233:915): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358304.233:916): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358304.233:917): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=17014 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358304.253:918): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358304.253:919): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358304.263:920): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358304.263:921): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358304.263:922): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=17031 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358304.285:923): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358304.285:924): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358304.298:925): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358304.298:926): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358304.299:927): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=17055 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358304.326:928): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358304.327:929): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358304.335:930): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358304.335:931): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358304.336:932): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=17072 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358304.355:933): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358304.355:934): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358304.364:935): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358304.364:936): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358304.365:937): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=17090 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1774358304.394:938): pid=17108 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1774358304.394:939): pid=17108 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D75697770617964716A6374706869646279776C686B77677375726F737061726E203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313737343335383330342E323535343132382D31373031322D36333139323231333031373537322F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1774358304.394:940): pid=17108 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1774358304.396:941): pid=17108 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358304.538:942): pid=17108 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1774358304.538:943): pid=17108 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358304.540:944): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358304.540:945): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358304.548:946): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358304.548:947): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358304.549:948): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=17114 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358304.568:949): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358304.568:950): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358304.709:951): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358304.709:952): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358304.710:953): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=17134 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358304.729:954): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358304.729:955): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358304.737:956): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358304.737:957): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358304.738:958): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=17151 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358304.759:959): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358304.759:960): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358305.004:961): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358305.004:962): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358305.004:963): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=17175 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358305.043:964): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358305.043:965): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358305.055:966): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358305.055:967): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358305.056:968): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=17192 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358305.076:969): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358305.076:970): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358305.087:971): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358305.087:972): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358305.088:973): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=17210 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1774358305.120:974): pid=17228 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1774358305.120:975): pid=17228 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D72726F686171737A6F707579616C78746D626E6D76726B72687A6D696E756E71203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313737343335383330342E373331353530352D31373133322D3134383232323132303432313933372F416E736962616C6C5A5F73797374656D642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1774358305.120:976): pid=17228 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1774358305.122:977): pid=17228 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=BPF msg=audit(1774358305.511:978): prog-id=43 op=LOAD
type=BPF msg=audit(1774358305.511:979): prog-id=29 op=UNLOAD
type=BPF msg=audit(1774358305.511:980): prog-id=44 op=LOAD
type=BPF msg=audit(1774358305.511:981): prog-id=45 op=LOAD
type=BPF msg=audit(1774358305.511:982): prog-id=30 op=UNLOAD
type=BPF msg=audit(1774358305.511:983): prog-id=31 op=UNLOAD
type=BPF msg=audit(1774358305.512:984): prog-id=46 op=LOAD
type=BPF msg=audit(1774358305.512:985): prog-id=47 op=LOAD
type=BPF msg=audit(1774358305.512:986): prog-id=34 op=UNLOAD
type=BPF msg=audit(1774358305.512:987): prog-id=35 op=UNLOAD
type=BPF msg=audit(1774358305.513:988): prog-id=48 op=LOAD
type=BPF msg=audit(1774358305.513:989): prog-id=49 op=LOAD
type=BPF msg=audit(1774358305.513:990): prog-id=36 op=UNLOAD
type=BPF msg=audit(1774358305.513:991): prog-id=37 op=UNLOAD
type=BPF msg=audit(1774358305.514:992): prog-id=50 op=LOAD
type=BPF msg=audit(1774358305.514:993): prog-id=38 op=UNLOAD
type=BPF msg=audit(1774358305.516:994): prog-id=51 op=LOAD
type=BPF msg=audit(1774358305.516:995): prog-id=39 op=UNLOAD
type=BPF msg=audit(1774358305.516:996): prog-id=52 op=LOAD
type=BPF msg=audit(1774358305.516:997): prog-id=53 op=LOAD
type=BPF msg=audit(1774358305.516:998): prog-id=40 op=UNLOAD
type=BPF msg=audit(1774358305.516:999): prog-id=41 op=UNLOAD
type=BPF msg=audit(1774358305.517:1000): prog-id=54 op=LOAD
type=BPF msg=audit(1774358305.517:1001): prog-id=42 op=UNLOAD
type=SERVICE_STOP msg=audit(1774358305.530:1002): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cloud-config comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1774358305.547:1003): pid=17228 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1774358305.547:1004): pid=17228 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358305.550:1005): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358305.550:1006): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358305.559:1007): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358305.559:1008): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358305.560:1009): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=17264 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358305.579:1010): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358305.579:1011): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358305.618:1012): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358305.618:1013): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358305.619:1014): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=17283 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358305.637:1015): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358305.637:1016): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358305.646:1017): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358305.646:1018): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358305.646:1019): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=17300 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358305.668:1020): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358305.668:1021): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358305.682:1022): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358305.682:1023): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358305.683:1024): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=17324 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358305.719:1025): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358305.719:1026): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358305.734:1027): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358305.734:1028): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358305.735:1029): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=17341 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358305.754:1030): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358305.754:1031): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358305.764:1032): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358305.764:1033): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358305.765:1034): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=17359 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1774358305.791:1035): pid=17377 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1774358305.792:1036): pid=17377 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E77787A736673756A61786471756D6D6261646D7165716F736E6C726D696377203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313737343335383330352E3633393232382D31373133322D32323938323734303237333132392F416E736962616C6C5A5F73797374656D642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1774358305.792:1037): pid=17377 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1774358305.794:1038): pid=17377 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=BPF msg=audit(1774358306.298:1039): prog-id=55 op=LOAD
type=BPF msg=audit(1774358306.298:1040): prog-id=43 op=UNLOAD
type=BPF msg=audit(1774358306.298:1041): prog-id=56 op=LOAD
type=BPF msg=audit(1774358306.298:1042): prog-id=57 op=LOAD
type=BPF msg=audit(1774358306.298:1043): prog-id=44 op=UNLOAD
type=BPF msg=audit(1774358306.298:1044): prog-id=45 op=UNLOAD
type=BPF msg=audit(1774358306.299:1045): prog-id=58 op=LOAD
type=BPF msg=audit(1774358306.299:1046): prog-id=59 op=LOAD
type=BPF msg=audit(1774358306.299:1047): prog-id=46 op=UNLOAD
type=BPF msg=audit(1774358306.299:1048): prog-id=47 op=UNLOAD
type=BPF msg=audit(1774358306.300:1049): prog-id=60 op=LOAD
type=BPF msg=audit(1774358306.300:1050): prog-id=61 op=LOAD
type=BPF msg=audit(1774358306.300:1051): prog-id=48 op=UNLOAD
type=BPF msg=audit(1774358306.300:1052): prog-id=49 op=UNLOAD
type=BPF msg=audit(1774358306.301:1053): prog-id=62 op=LOAD
type=BPF msg=audit(1774358306.301:1054): prog-id=50 op=UNLOAD
type=BPF msg=audit(1774358306.303:1055): prog-id=63 op=LOAD
type=BPF msg=audit(1774358306.303:1056): prog-id=51 op=UNLOAD
type=BPF msg=audit(1774358306.303:1057): prog-id=64 op=LOAD
type=BPF msg=audit(1774358306.303:1058): prog-id=65 op=LOAD
type=BPF msg=audit(1774358306.303:1059): prog-id=52 op=UNLOAD
type=BPF msg=audit(1774358306.303:1060): prog-id=53 op=UNLOAD
type=BPF msg=audit(1774358306.304:1061): prog-id=66 op=LOAD
type=BPF msg=audit(1774358306.304:1062): prog-id=54 op=UNLOAD
type=SERVICE_STOP msg=audit(1774358306.317:1063): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cloud-final comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1774358306.338:1064): pid=17377 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1774358306.339:1065): pid=17377 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358306.341:1066): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358306.341:1067): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358306.351:1068): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358306.351:1069): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358306.352:1070): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=17413 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358306.371:1071): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358306.371:1072): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358306.410:1073): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358306.410:1074): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358306.411:1075): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=17431 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358306.429:1076): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358306.430:1077): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358306.438:1078): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358306.438:1079): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358306.439:1080): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=17448 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358306.460:1081): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358306.460:1082): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358306.474:1083): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358306.474:1084): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358306.475:1085): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=17472 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358306.510:1086): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358306.510:1087): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358306.520:1088): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358306.520:1089): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358306.521:1090): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=17489 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358306.541:1091): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358306.541:1092): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358306.551:1093): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358306.551:1094): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358306.552:1095): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=17507 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1774358306.578:1096): pid=17525 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1774358306.578:1097): pid=17525 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F6E647862686F64737277626D6E6E6A6F667A6C676E7164626D78786F6E6767203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313737343335383330362E343331393938372D31373133322D3136383031303634313739342F416E736962616C6C5A5F73797374656D642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1774358306.579:1098): pid=17525 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1774358306.581:1099): pid=17525 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=BPF msg=audit(1774358307.002:1100): prog-id=67 op=LOAD
type=BPF msg=audit(1774358307.002:1101): prog-id=55 op=UNLOAD
type=BPF msg=audit(1774358307.002:1102): prog-id=68 op=LOAD
type=BPF msg=audit(1774358307.002:1103): prog-id=69 op=LOAD
type=BPF msg=audit(1774358307.002:1104): prog-id=56 op=UNLOAD
type=BPF msg=audit(1774358307.002:1105): prog-id=57 op=UNLOAD
type=BPF msg=audit(1774358307.003:1106): prog-id=70 op=LOAD
type=BPF msg=audit(1774358307.003:1107): prog-id=71 op=LOAD
type=BPF msg=audit(1774358307.003:1108): prog-id=58 op=UNLOAD
type=BPF msg=audit(1774358307.003:1109): prog-id=59 op=UNLOAD
type=BPF msg=audit(1774358307.004:1110): prog-id=72 op=LOAD
type=BPF msg=audit(1774358307.004:1111): prog-id=73 op=LOAD
type=BPF msg=audit(1774358307.004:1112): prog-id=60 op=UNLOAD
type=BPF msg=audit(1774358307.004:1113): prog-id=61 op=UNLOAD
type=BPF msg=audit(1774358307.005:1114): prog-id=74 op=LOAD
type=BPF msg=audit(1774358307.005:1115): prog-id=62 op=UNLOAD
type=BPF msg=audit(1774358307.007:1116): prog-id=75 op=LOAD
type=BPF msg=audit(1774358307.007:1117): prog-id=63 op=UNLOAD
type=BPF msg=audit(1774358307.007:1118): prog-id=76 op=LOAD
type=BPF msg=audit(1774358307.007:1119): prog-id=77 op=LOAD
type=BPF msg=audit(1774358307.007:1120): prog-id=64 op=UNLOAD
type=BPF msg=audit(1774358307.007:1121): prog-id=65 op=UNLOAD
type=BPF msg=audit(1774358307.008:1122): prog-id=78 op=LOAD
type=BPF msg=audit(1774358307.008:1123): prog-id=66 op=UNLOAD
type=SERVICE_STOP msg=audit(1774358307.021:1124): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cloud-init-local comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1774358307.039:1125): pid=17525 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1774358307.039:1126): pid=17525 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358307.042:1127): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358307.042:1128): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358307.053:1129): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358307.053:1130): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358307.053:1131): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=17561 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358307.076:1132): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358307.076:1133): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358307.111:1134): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358307.111:1135): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358307.112:1136): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=17579 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358307.131:1137): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358307.131:1138): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358307.139:1139): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358307.139:1140): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358307.140:1141): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=17596 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358307.164:1142): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358307.164:1143): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358307.181:1144): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358307.181:1145): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358307.182:1146): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=17620 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358307.228:1147): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358307.228:1148): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358307.238:1149): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358307.238:1150): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358307.239:1151): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=17637 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358307.261:1152): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358307.261:1153): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358307.271:1154): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358307.271:1155): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358307.272:1156): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=17655 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1774358307.302:1157): pid=17673 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1774358307.302:1158): pid=17673 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B7A6C63617574786F6B6670636F6D6F6A6B6F70637064736F7A6865676A7474203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313737343335383330372E3133333233312D31373133322D3136373339373838363337343933352F416E736962616C6C5A5F73797374656D642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1774358307.302:1159): pid=17673 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1774358307.304:1160): pid=17673 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=BPF msg=audit(1774358307.778:1161): prog-id=79 op=LOAD
type=BPF msg=audit(1774358307.778:1162): prog-id=67 op=UNLOAD
type=BPF msg=audit(1774358307.778:1163): prog-id=80 op=LOAD
type=BPF msg=audit(1774358307.778:1164): prog-id=81 op=LOAD
type=BPF msg=audit(1774358307.778:1165): prog-id=68 op=UNLOAD
type=BPF msg=audit(1774358307.778:1166): prog-id=69 op=UNLOAD
type=BPF msg=audit(1774358307.779:1167): prog-id=82 op=LOAD
type=BPF msg=audit(1774358307.779:1168): prog-id=83 op=LOAD
type=BPF msg=audit(1774358307.779:1169): prog-id=70 op=UNLOAD
type=BPF msg=audit(1774358307.779:1170): prog-id=71 op=UNLOAD
type=BPF msg=audit(1774358307.779:1171): prog-id=84 op=LOAD
type=BPF msg=audit(1774358307.779:1172): prog-id=85 op=LOAD
type=BPF msg=audit(1774358307.779:1173): prog-id=72 op=UNLOAD
type=BPF msg=audit(1774358307.779:1174): prog-id=73 op=UNLOAD
type=BPF msg=audit(1774358307.780:1175): prog-id=86 op=LOAD
type=BPF msg=audit(1774358307.780:1176): prog-id=74 op=UNLOAD
type=BPF msg=audit(1774358307.782:1177): prog-id=87 op=LOAD
type=BPF msg=audit(1774358307.782:1178): prog-id=75 op=UNLOAD
type=BPF msg=audit(1774358307.783:1179): prog-id=88 op=LOAD
type=BPF msg=audit(1774358307.783:1180): prog-id=89 op=LOAD
type=BPF msg=audit(1774358307.783:1181): prog-id=76 op=UNLOAD
type=BPF msg=audit(1774358307.783:1182): prog-id=77 op=UNLOAD
type=BPF msg=audit(1774358307.783:1183): prog-id=90 op=LOAD
type=BPF msg=audit(1774358307.783:1184): prog-id=78 op=UNLOAD
type=SERVICE_STOP msg=audit(1774358307.796:1185): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cloud-init comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1774358307.818:1186): pid=17673 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1774358307.818:1187): pid=17673 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358307.821:1188): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358307.821:1189): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358307.834:1190): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358307.834:1191): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358307.835:1192): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=17709 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358307.856:1193): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358307.856:1194): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358307.896:1195): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358307.896:1196): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358307.897:1197): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=17727 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358307.915:1198): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358307.915:1199): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358307.925:1200): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358307.925:1201): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358307.926:1202): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=17744 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358307.947:1203): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358307.947:1204): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358307.962:1205): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358307.962:1206): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358307.962:1207): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=17768 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358308.002:1208): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358308.002:1209): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358308.012:1210): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358308.012:1211): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358308.013:1212): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=17785 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358308.032:1213): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358308.032:1214): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358308.042:1215): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358308.042:1216): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358308.043:1217): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=17803 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1774358308.073:1218): pid=17821 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1774358308.073:1219): pid=17821 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D67717A74666B67647079776D776A6C76666A656761726F6B6973707561766676203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313737343335383330372E393137353433362D31373133322D3137323931363136333333303732382F416E736962616C6C5A5F73797374656D642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1774358308.073:1220): pid=17821 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1774358308.075:1221): pid=17821 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358308.346:1222): pid=17821 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1774358308.346:1223): pid=17821 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358308.349:1224): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358308.349:1225): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358308.361:1226): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358308.361:1227): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358308.362:1228): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=17827 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358308.380:1229): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358308.380:1230): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358308.650:1231): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358308.650:1232): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358308.651:1233): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=17848 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358308.668:1234): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358308.668:1235): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358308.677:1236): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358308.677:1237): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358308.677:1238): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=17865 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358308.698:1239): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358308.698:1240): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358308.928:1241): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358308.928:1242): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358308.928:1243): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=17889 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358308.964:1244): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358308.964:1245): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358308.973:1246): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358308.973:1247): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358308.973:1248): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=17906 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358308.993:1249): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358308.993:1250): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358309.002:1251): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358309.002:1252): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358309.003:1253): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=17924 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1774358309.030:1254): pid=17942 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1774358309.030:1255): pid=17942 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A6C637077766568636C766165716E78707566696672696B766D7579686F7377203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313737343335383330382E363730383833342D31373834362D3132333336353038393534323435392F416E736962616C6C5A5F73656C696E75782E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1774358309.030:1256): pid=17942 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1774358309.032:1257): pid=17942 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=MAC_STATUS msg=audit(1774358309.278:1258): enforcing=0 old_enforcing=1 auid=1000 ses=26 enabled=1 old-enabled=1 lsm=selinux res=1AUID="rocky"
type=SYSCALL msg=audit(1774358309.278:1258): arch=c000003e syscall=1 success=yes exit=1 a0=4 a1=7fff68a254f0 a2=1 a3=0 items=0 ppid=17942 pid=17944 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=26 comm="python3.9" exe="/usr/bin/python3.9" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358309.278:1258): proctitle=2F7573722F62696E2F707974686F6E332E39002F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313737343335383330382E363730383833342D31373834362D3132333336353038393534323435392F416E736962616C6C5A5F73656C696E75782E7079
type=USER_END msg=audit(1774358309.299:1259): pid=17942 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1774358309.299:1260): pid=17942 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358309.302:1261): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358309.302:1262): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358309.310:1263): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358309.310:1264): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358309.311:1265): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=17946 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358309.329:1266): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358309.329:1267): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358309.821:1268): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358309.821:1269): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358309.822:1270): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=17980 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358309.840:1271): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358309.840:1272): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358309.848:1273): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358309.848:1274): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358309.849:1275): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=17997 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358309.870:1276): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358309.870:1277): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358309.883:1278): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358309.883:1279): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358309.883:1280): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=18021 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358309.912:1281): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358309.912:1282): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358309.920:1283): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358309.920:1284): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358309.921:1285): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=18038 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358309.939:1286): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358309.939:1287): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358309.948:1288): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358309.948:1289): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358309.949:1290): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=18056 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1774358309.976:1291): pid=18074 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1774358309.976:1292): pid=18074 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6470776F64696476757A766A61787774776D72637A7A6F777564686662786163203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313737343335383330392E383432303832352D31373937382D3134383532373233363438363431362F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1774358309.976:1293): pid=18074 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1774358309.978:1294): pid=18074 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358310.143:1295): pid=18074 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1774358310.143:1296): pid=18074 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358310.146:1297): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358310.146:1298): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358310.156:1299): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358310.156:1300): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358310.157:1301): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=18082 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358310.176:1302): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358310.176:1303): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358311.299:1304): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358311.299:1305): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358311.299:1306): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=18114 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358311.317:1307): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358311.317:1308): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358311.325:1309): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358311.325:1310): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358311.326:1311): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=18131 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358311.350:1312): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358311.350:1313): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358311.463:1314): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358311.464:1315): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358311.464:1316): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=18155 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358311.492:1317): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358311.492:1318): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358311.501:1319): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358311.501:1320): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358311.502:1321): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=18172 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358311.520:1322): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358311.520:1323): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358311.532:1324): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358311.532:1325): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358311.533:1326): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=18190 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1774358311.559:1327): pid=18208 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1774358311.559:1328): pid=18208 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D67756F74767771796B727A6D78786A746273666C7A6B6462786F71716B646D6D203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313737343335383331312E333139323438372D31383131322D3230393038363137333438373537322F416E736962616C6C5A5F6765745F75726C2E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1774358311.559:1329): pid=18208 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1774358311.561:1330): pid=18208 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358311.945:1331): pid=18208 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1774358311.946:1332): pid=18208 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358311.948:1333): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358311.948:1334): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358311.957:1335): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358311.957:1336): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358311.958:1337): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=18212 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358311.982:1338): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358311.982:1339): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358312.140:1340): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358312.140:1341): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358312.141:1342): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=18232 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358312.159:1343): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358312.159:1344): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358312.167:1345): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358312.167:1346): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358312.168:1347): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=18249 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358312.189:1348): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358312.189:1349): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358312.341:1350): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358312.341:1351): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358312.342:1352): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=18273 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358312.371:1353): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358312.371:1354): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358312.383:1355): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358312.383:1356): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358312.384:1357): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=18290 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358312.407:1358): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358312.407:1359): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358312.418:1360): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358312.418:1361): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358312.418:1362): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=18308 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1774358312.449:1363): pid=18326 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1774358312.449:1364): pid=18326 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7964726B70646874706B616D6B6E6177777164637278706E61766B796D7A6E67203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313737343335383331322E313631343635342D31383233302D3231343035373933373334313637382F416E736962616C6C5A5F646E662E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1774358312.450:1365): pid=18326 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1774358312.451:1366): pid=18326 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=SERVICE_START msg=audit(1774358344.965:1367): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r95c55d2eaf8946d8a99e8efb079930e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SOFTWARE_UPDATE msg=audit(1774358345.056:1368): pid=18328 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="m4-1.4.19-1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358345.056:1369): pid=18328 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libmpc-1.2.1-4.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358345.056:1370): pid=18328 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="make-1:4.3-8.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358345.056:1371): pid=18328 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="cpp-11.5.0-5.el9_5.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358345.056:1372): pid=18328 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="bison-3.7.4-5.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358345.056:1373): pid=18328 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="flex-2.6.4-9.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358345.056:1374): pid=18328 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Digest-1.19-4.el9.0.1.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358345.056:1375): pid=18328 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Digest-MD5-2.58-4.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358345.056:1376): pid=18328 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-B-0:1.80-481.1.el9_6.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358345.056:1377): pid=18328 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-FileHandle-0:2.03-481.1.el9_6.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358345.056:1378): pid=18328 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Data-Dumper-2.174-462.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358345.056:1379): pid=18328 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-libnet-3.13-4.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358345.056:1380): pid=18328 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-base-0:2.27-481.1.el9_6.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358345.056:1381): pid=18328 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-URI-5.09-3.el9.0.1.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358345.056:1382): pid=18328 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-AutoLoader-0:5.74-481.1.el9_6.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358345.056:1383): pid=18328 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Mozilla-CA-20200520-6.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358345.057:1384): pid=18328 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-if-0:0.60.800-481.1.el9_6.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358345.057:1385): pid=18328 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-IO-Socket-IP-0.41-5.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358345.057:1386): pid=18328 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Time-Local-2:1.300-7.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358345.057:1387): pid=18328 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-File-Path-2.18-4.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358345.057:1388): pid=18328 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Pod-Escapes-1:1.07-460.el9.0.1.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358345.057:1389): pid=18328 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Text-Tabs+Wrap-2013.0523-460.el9.0.1.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358345.057:1390): pid=18328 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-IO-Socket-SSL-2.073-2.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358345.057:1391): pid=18328 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Net-SSLeay-1.94-3.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358345.057:1392): pid=18328 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Class-Struct-0:0.66-481.1.el9_6.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358345.057:1393): pid=18328 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-POSIX-0:1.94-481.1.el9_6.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358345.057:1394): pid=18328 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Term-ANSIColor-5.01-461.el9.0.1.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358345.057:1395): pid=18328 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-IPC-Open3-0:1.21-481.1.el9_6.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358345.057:1396): pid=18328 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-subs-0:1.03-481.1.el9_6.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358345.057:1397): pid=18328 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-File-Temp-1:0.231.100-4.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358345.057:1398): pid=18328 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Term-Cap-1.17-460.el9.0.1.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358345.057:1399): pid=18328 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Pod-Simple-1:3.42-4.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358345.057:1400): pid=18328 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-HTTP-Tiny-0.076-462.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358345.057:1401): pid=18328 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Socket-4:2.031-4.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358345.057:1402): pid=18328 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-SelectSaver-0:1.02-481.1.el9_6.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358345.057:1403): pid=18328 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Symbol-0:1.08-481.1.el9_6.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358345.057:1404): pid=18328 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-File-stat-0:1.09-481.1.el9_6.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358345.057:1405): pid=18328 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-podlators-1:4.14-460.el9.0.1.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358345.057:1406): pid=18328 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Pod-Perldoc-3.28.01-461.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358345.057:1407): pid=18328 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Fcntl-0:1.13-481.1.el9_6.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358345.057:1408): pid=18328 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Text-ParseWords-3.30-460.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358345.057:1409): pid=18328 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-mro-0:1.23-481.1.el9_6.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358345.057:1410): pid=18328 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-IO-0:1.43-481.1.el9_6.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358345.057:1411): pid=18328 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-overloading-0:0.02-481.1.el9_6.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358345.057:1412): pid=18328 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Pod-Usage-4:2.01-4.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358345.057:1413): pid=18328 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Errno-0:1.30-481.1.el9_6.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358345.057:1414): pid=18328 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-File-Basename-0:2.85-481.1.el9_6.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358345.057:1415): pid=18328 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Getopt-Std-0:1.12-481.1.el9_6.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358345.057:1416): pid=18328 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-MIME-Base64-3.16-4.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358345.057:1417): pid=18328 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Scalar-List-Utils-4:1.56-462.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358345.057:1418): pid=18328 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-constant-1.33-461.el9.0.1.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358345.057:1419): pid=18328 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Storable-1:3.21-460.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358345.057:1420): pid=18328 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-overload-0:1.31-481.1.el9_6.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358345.057:1421): pid=18328 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-parent-1:0.238-460.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358345.057:1422): pid=18328 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-vars-0:1.05-481.1.el9_6.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358345.057:1423): pid=18328 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Getopt-Long-1:2.52-4.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358345.057:1424): pid=18328 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Carp-1.50-460.el9.0.1.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358345.057:1425): pid=18328 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Exporter-5.74-461.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358345.057:1426): pid=18328 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-NDBM_File-0:1.15-481.1.el9_6.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358345.057:1427): pid=18328 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-PathTools-3.78-461.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358345.057:1428): pid=18328 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Encode-4:3.08-462.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358345.057:1429): pid=18328 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-libs-4:5.32.1-481.1.el9_6.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358345.057:1430): pid=18328 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-interpreter-4:5.32.1-481.1.el9_6.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358345.057:1431): pid=18328 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="libgomp-11.5.0-5.el9_5.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358345.057:1432): pid=18328 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="libgcc-11.5.0-5.el9_5.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358345.057:1433): pid=18328 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="kernel-headers-5.14.0-611.30.1.el9_7.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358345.057:1434): pid=18328 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="glibc-headers-2.34-125.el9_5.1.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358345.057:1435): pid=18328 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="pkgconf-m4-1.7.3-10.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358345.057:1436): pid=18328 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libpkgconf-1.7.3-10.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358345.057:1437): pid=18328 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="pkgconf-1.7.3-10.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358345.057:1438): pid=18328 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="pkgconf-pkg-config-1.7.3-10.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358345.057:1439): pid=18328 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="glibc-devel-2.34-125.el9_5.1.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358345.057:1440): pid=18328 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libxcrypt-devel-4.4.18-3.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358345.057:1441): pid=18328 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="gcc-11.5.0-5.el9_5.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358345.057:1442): pid=18328 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libzstd-devel-1.5.1-2.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358345.057:1443): pid=18328 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="openssl-devel-1:3.5.1-7.el9_7.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358345.058:1444): pid=18328 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="zlib-devel-1.2.11-40.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358345.058:1445): pid=18328 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="elfutils-libelf-devel-0.191-4.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358345.058:1446): pid=18328 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="kernel-devel-5.14.0-503.14.1.el9_5.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1774358347.394:1447): pid=18326 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1774358347.394:1448): pid=18326 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358347.397:1449): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358347.397:1450): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358347.408:1451): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358347.408:1452): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358347.409:1453): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=37713 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358347.428:1454): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358347.428:1455): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358347.596:1456): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358347.596:1457): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358347.597:1458): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=37910 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358347.615:1459): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358347.615:1460): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358347.623:1461): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358347.623:1462): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358347.624:1463): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=37949 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358347.645:1464): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358347.645:1465): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358347.744:1466): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358347.744:1467): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358347.745:1468): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=38041 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358347.773:1469): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358347.773:1470): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358347.782:1471): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358347.782:1472): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358347.783:1473): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=38097 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358347.801:1474): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358347.801:1475): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358347.810:1476): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358347.810:1477): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358347.811:1478): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=38145 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1774358347.838:1479): pid=38182 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1774358347.838:1480): pid=38182 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D616270726179646D7975726875737264676E727A6F68696877717074697A6D62203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313737343335383334372E363137313539312D33373739342D35313839353733393439393036372F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1774358347.839:1481): pid=38182 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1774358347.841:1482): pid=38182 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358347.980:1483): pid=38182 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1774358347.981:1484): pid=38182 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358347.983:1485): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358347.983:1486): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358347.992:1487): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358347.992:1488): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358347.993:1489): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=38322 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358348.012:1490): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358348.012:1491): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358348.568:1492): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358348.568:1493): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358348.569:1494): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=38992 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358348.586:1495): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358348.586:1496): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358348.597:1497): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358348.597:1498): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358348.598:1499): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=39009 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358348.619:1500): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358348.619:1501): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=SERVICE_START msg=audit(1774358348.681:1502): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1774358348.681:1503): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1774358348.714:1504): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358348.714:1505): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358348.715:1506): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=39034 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=SERVICE_STOP msg=audit(1774358348.723:1507): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r95c55d2eaf8946d8a99e8efb079930e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1774358348.744:1508): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358348.744:1509): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358348.755:1510): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358348.755:1511): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358348.755:1512): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=39051 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358348.773:1513): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358348.773:1514): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358348.782:1515): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358348.782:1516): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358348.783:1517): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=39069 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1774358348.809:1518): pid=39087 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1774358348.810:1519): pid=39087 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D666A626F776C6669756E6D627A76726671666D6568746E64627271776D696D68203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313737343335383334382E353839323733352D33383837302D35313632303638303136343137392F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1774358348.810:1520): pid=39087 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1774358348.811:1521): pid=39087 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358348.944:1522): pid=39087 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1774358348.944:1523): pid=39087 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358348.946:1524): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358348.946:1525): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358348.956:1526): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358348.956:1527): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358348.957:1528): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=39091 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358348.976:1529): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358348.976:1530): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358349.309:1531): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358349.309:1532): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358349.309:1533): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=39115 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358349.326:1534): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358349.326:1535): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358349.335:1536): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358349.335:1537): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358349.336:1538): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=39132 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358349.357:1539): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358349.357:1540): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358349.369:1541): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358349.369:1542): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358349.370:1543): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=39156 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358349.396:1544): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358349.396:1545): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358349.405:1546): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358349.405:1547): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358349.405:1548): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=39173 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358349.423:1549): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358349.423:1550): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358349.434:1551): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358349.434:1552): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358349.435:1553): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=39191 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1774358349.461:1554): pid=39209 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1774358349.461:1555): pid=39209 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D61696B76757174637274627164797168787879637A6B736C706F7476647A6B67203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313737343335383334392E333238393035382D33393131332D3134353631313735333734323735332F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1774358349.461:1556): pid=39209 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1774358349.462:1557): pid=39209 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358349.621:1558): pid=39209 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1774358349.621:1559): pid=39209 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358349.623:1560): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358349.623:1561): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358349.633:1562): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358349.633:1563): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358349.633:1564): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=39215 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358349.651:1565): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358349.651:1566): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358350.550:1567): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358350.550:1568): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358350.551:1569): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=39267 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358350.568:1570): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358350.568:1571): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358350.576:1572): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358350.576:1573): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358350.577:1574): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=39284 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358350.598:1575): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358350.598:1576): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358350.697:1577): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358350.697:1578): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358350.698:1579): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=39308 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358350.725:1580): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358350.725:1581): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358350.734:1582): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358350.734:1583): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358350.735:1584): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=39325 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358350.754:1585): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358350.754:1586): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358350.765:1587): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358350.765:1588): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358350.766:1589): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=39343 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1774358350.793:1590): pid=39361 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1774358350.793:1591): pid=39361 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D636877776869707461796C6D706F6F6264717676797A68777A656B786C636B7A203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313737343335383335302E353730333130342D33393236352D3131343637343835393830313137352F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1774358350.793:1592): pid=39361 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1774358350.795:1593): pid=39361 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358350.959:1594): pid=39361 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1774358350.959:1595): pid=39361 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358350.962:1596): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358350.962:1597): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358350.971:1598): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358350.971:1599): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358350.971:1600): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=39365 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358350.990:1601): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358350.990:1602): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358351.398:1603): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358351.398:1604): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358351.399:1605): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=39397 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358351.417:1606): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358351.417:1607): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358351.427:1608): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358351.427:1609): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358351.428:1610): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=39414 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358351.450:1611): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358351.450:1612): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358351.464:1613): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358351.464:1614): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358351.465:1615): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=39438 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358351.492:1616): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358351.492:1617): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358351.502:1618): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358351.502:1619): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358351.503:1620): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=39455 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358351.522:1621): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358351.522:1622): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358351.532:1623): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358351.532:1624): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358351.533:1625): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=39473 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1774358351.558:1626): pid=39491 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1774358351.558:1627): pid=39491 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D73756565696E7A7864687A79786F6F6262666E7473697967737464676F616B66203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313737343335383335312E343139333138342D33393339352D39383130303937383036313737392F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1774358351.559:1628): pid=39491 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1774358351.560:1629): pid=39491 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358351.702:1630): pid=39491 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1774358351.702:1631): pid=39491 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358351.704:1632): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358351.704:1633): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358351.714:1634): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358351.714:1635): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358351.715:1636): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=39495 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358351.734:1637): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358351.734:1638): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358351.882:1639): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358351.882:1640): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358351.883:1641): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=39515 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358351.900:1642): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358351.900:1643): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358351.909:1644): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358351.909:1645): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358351.910:1646): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=39532 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358351.931:1647): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358351.931:1648): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358352.054:1649): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358352.054:1650): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358352.055:1651): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=39556 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358352.081:1652): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358352.081:1653): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358352.091:1654): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358352.091:1655): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358352.092:1656): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=39573 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358352.110:1657): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358352.110:1658): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358352.119:1659): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358352.119:1660): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358352.120:1661): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=39591 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1774358352.145:1662): pid=39609 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1774358352.146:1663): pid=39609 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D66696F6678717A697A70746A766279647971676E6C646A627A6F6A7062657376203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313737343335383335312E393032393135322D33393531332D3232303535363936373738373035372F416E736962616C6C5A5F6D6F6470726F62652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1774358352.146:1664): pid=39609 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1774358352.147:1665): pid=39609 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358352.329:1666): pid=39609 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1774358352.330:1667): pid=39609 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358352.332:1668): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358352.332:1669): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358352.342:1670): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358352.342:1671): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358352.343:1672): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=39617 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358352.364:1673): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358352.364:1674): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358352.515:1675): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358352.515:1676): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358352.515:1677): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=39637 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358352.532:1678): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358352.532:1679): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358352.540:1680): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358352.540:1681): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358352.541:1682): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=39654 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358352.561:1683): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358352.561:1684): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358352.574:1685): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358352.574:1686): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358352.575:1687): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=39678 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358352.602:1688): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358352.602:1689): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358352.610:1690): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358352.610:1691): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358352.611:1692): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=39695 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358352.628:1693): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358352.628:1694): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358352.638:1695): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358352.638:1696): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358352.638:1697): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=39713 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1774358352.663:1698): pid=39731 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1774358352.663:1699): pid=39731 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6371756B6A7A6C6F6871756366726D6A697565686874616E6363666C62767763203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313737343335383335322E353334363331372D33393633352D33363632333337373834363338352F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1774358352.664:1700): pid=39731 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1774358352.665:1701): pid=39731 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358352.802:1702): pid=39731 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1774358352.802:1703): pid=39731 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358352.804:1704): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358352.804:1705): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358352.813:1706): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358352.813:1707): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358352.814:1708): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=39737 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358352.833:1709): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358352.833:1710): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358352.988:1711): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358352.988:1712): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358352.989:1713): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=39757 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358353.010:1714): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358353.010:1715): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358353.018:1716): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358353.018:1717): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358353.019:1718): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=39774 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358353.043:1719): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358353.043:1720): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358353.056:1721): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358353.056:1722): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358353.057:1723): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=39798 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358353.083:1724): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358353.083:1725): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358353.092:1726): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358353.092:1727): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358353.093:1728): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=39815 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358353.111:1729): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358353.111:1730): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358353.120:1731): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358353.120:1732): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358353.121:1733): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=39833 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1774358353.146:1734): pid=39851 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1774358353.146:1735): pid=39851 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D76636F77676E6A6E63776469667667756B75707373617572647570736D707263203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313737343335383335332E3031323332372D33393735352D3232373736393931363538323335312F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1774358353.147:1736): pid=39851 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1774358353.148:1737): pid=39851 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358353.285:1738): pid=39851 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1774358353.286:1739): pid=39851 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358353.288:1740): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358353.288:1741): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358353.297:1742): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358353.297:1743): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358353.297:1744): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=39857 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358353.321:1745): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358353.321:1746): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358353.490:1747): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358353.490:1748): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358353.491:1749): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=39877 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358353.508:1750): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358353.508:1751): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358353.518:1752): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358353.518:1753): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358353.519:1754): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=39894 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358353.540:1755): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358353.540:1756): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358353.638:1757): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358353.638:1758): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358353.639:1759): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=39918 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358353.668:1760): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358353.668:1761): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358353.677:1762): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358353.677:1763): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358353.678:1764): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=39935 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358353.696:1765): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358353.696:1766): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358353.706:1767): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358353.706:1768): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358353.707:1769): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=39953 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1774358353.735:1770): pid=39971 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1774358353.735:1771): pid=39971 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E746264717A6C64726269707278617A6F7A6865727A72736171727067706C72203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313737343335383335332E353130393238322D33393837352D3235393639323439353436353039392F416E736962616C6C5A5F73797363746C2E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1774358353.736:1772): pid=39971 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1774358353.737:1773): pid=39971 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358353.889:1774): pid=39971 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1774358353.889:1775): pid=39971 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358353.891:1776): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358353.891:1777): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358353.902:1778): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358353.902:1779): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358353.902:1780): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=39978 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358353.922:1781): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358353.922:1782): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358354.083:1783): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358354.083:1784): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358354.084:1785): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=39998 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358354.103:1786): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358354.103:1787): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358354.113:1788): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358354.113:1789): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358354.114:1790): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=40015 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358354.137:1791): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358354.137:1792): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358354.152:1793): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358354.152:1794): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358354.153:1795): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=40039 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358354.181:1796): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358354.181:1797): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358354.193:1798): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358354.193:1799): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358354.194:1800): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=40056 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358354.214:1801): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358354.214:1802): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358354.225:1803): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358354.225:1804): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358354.226:1805): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=40074 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1774358354.256:1806): pid=40092 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1774358354.256:1807): pid=40092 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D687A7971737063757070766573736A787A777665746F6D69626776787070666B203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313737343335383335342E313035393335332D33393939362D3234373839383535373738313634332F416E736962616C6C5A5F73797363746C2E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1774358354.256:1808): pid=40092 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1774358354.258:1809): pid=40092 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358354.404:1810): pid=40092 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1774358354.405:1811): pid=40092 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358354.407:1812): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358354.407:1813): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358354.415:1814): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358354.415:1815): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358354.416:1816): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=40099 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358354.435:1817): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358354.435:1818): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358354.596:1819): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358354.596:1820): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358354.597:1821): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=40119 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358354.617:1822): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358354.617:1823): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358354.626:1824): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358354.626:1825): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358354.627:1826): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=40136 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358354.651:1827): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358354.651:1828): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358354.666:1829): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358354.666:1830): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358354.667:1831): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=40160 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358354.700:1832): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358354.700:1833): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358354.710:1834): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358354.710:1835): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358354.711:1836): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=40177 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358354.730:1837): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358354.730:1838): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358354.739:1839): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358354.739:1840): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358354.740:1841): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=40195 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1774358354.767:1842): pid=40213 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1774358354.767:1843): pid=40213 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A61677962796566756B6266766A727677727672666F74796E67796C61676D6C203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313737343335383335342E3631393739312D34303131372D3233323333373336373738323833372F416E736962616C6C5A5F73797363746C2E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1774358354.768:1844): pid=40213 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1774358354.769:1845): pid=40213 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358354.932:1846): pid=40213 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1774358354.932:1847): pid=40213 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358354.934:1848): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358354.934:1849): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358354.943:1850): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358354.943:1851): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358354.944:1852): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=40220 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358354.962:1853): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358354.962:1854): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358355.270:1855): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358355.270:1856): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358355.271:1857): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=40242 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358355.288:1858): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358355.288:1859): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358355.296:1860): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358355.296:1861): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358355.297:1862): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=40259 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358355.317:1863): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358355.317:1864): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358355.331:1865): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358355.331:1866): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358355.331:1867): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=40283 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358355.366:1868): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358355.367:1869): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358355.375:1870): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358355.375:1871): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358355.376:1872): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=40300 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358355.394:1873): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358355.394:1874): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358355.403:1875): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358355.403:1876): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358355.403:1877): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=40318 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1774358355.428:1878): pid=40336 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1774358355.428:1879): pid=40336 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F65647575616E6E7A736B6B6D777174657670747A75716968766371656D6676203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313737343335383335352E323930373331372D34303234302D3231333730323534353336373730372F416E736962616C6C5A5F73797374656D642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1774358355.428:1880): pid=40336 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1774358355.429:1881): pid=40336 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358355.690:1882): pid=40336 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1774358355.690:1883): pid=40336 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358355.691:1884): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358355.691:1885): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358355.700:1886): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358355.700:1887): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358355.701:1888): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=40341 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358355.720:1889): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358355.720:1890): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358355.880:1891): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358355.880:1892): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358355.880:1893): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=40361 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358355.899:1894): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358355.899:1895): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358355.907:1896): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358355.907:1897): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358355.908:1898): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=40378 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358355.929:1899): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358355.929:1900): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358355.942:1901): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358355.942:1902): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358355.943:1903): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=40402 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358355.970:1904): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358355.970:1905): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358355.979:1906): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358355.979:1907): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358355.980:1908): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=40419 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358355.998:1909): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358355.998:1910): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358356.008:1911): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358356.008:1912): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358356.009:1913): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=40437 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1774358356.035:1914): pid=40455 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1774358356.035:1915): pid=40455 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D66746D78796664617261616C6E7A6261636F76646D7574747565736A707A6C72203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313737343335383335352E393031333532362D34303335392D3135353236363831313532323530342F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1774358356.035:1916): pid=40455 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1774358356.036:1917): pid=40455 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358356.174:1918): pid=40455 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1774358356.174:1919): pid=40455 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358356.175:1920): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358356.175:1921): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358356.184:1922): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358356.184:1923): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358356.185:1924): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=40460 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358356.203:1925): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358356.204:1926): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358356.366:1927): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358356.366:1928): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358356.367:1929): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=40480 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358356.384:1930): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358356.384:1931): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358356.392:1932): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358356.392:1933): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358356.393:1934): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=40497 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358356.415:1935): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358356.415:1936): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358356.427:1937): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358356.427:1938): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358356.428:1939): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=40521 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358356.457:1940): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358356.457:1941): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358356.466:1942): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358356.466:1943): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358356.467:1944): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=40538 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358356.485:1945): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358356.485:1946): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358356.494:1947): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358356.494:1948): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358356.495:1949): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=40556 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1774358356.520:1950): pid=40574 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1774358356.520:1951): pid=40574 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7073736E75646A7977667A63796A736676616577656F66736B61766F72786B73203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313737343335383335362E333836363737332D34303437382D32383038383032343139353531322F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1774358356.520:1952): pid=40574 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1774358356.522:1953): pid=40574 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358356.659:1954): pid=40574 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1774358356.659:1955): pid=40574 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358356.661:1956): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358356.661:1957): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358356.669:1958): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358356.669:1959): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358356.670:1960): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=40579 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358356.689:1961): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358356.689:1962): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358357.072:1963): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358357.072:1964): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358357.073:1965): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=40603 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358357.090:1966): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358357.090:1967): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358357.099:1968): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358357.099:1969): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358357.100:1970): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=40620 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358357.120:1971): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358357.120:1972): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358357.133:1973): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358357.133:1974): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358357.133:1975): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=40644 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358357.160:1976): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358357.160:1977): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358357.168:1978): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358357.168:1979): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358357.169:1980): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=40661 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358357.187:1981): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358357.187:1982): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358357.195:1983): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358357.196:1984): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358357.196:1985): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=40679 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1774358357.222:1986): pid=40697 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1774358357.222:1987): pid=40697 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D68726B68716363766D796A706C78636F6C696B6B67756A6870667971796C6179203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313737343335383335372E303932353731352D34303630312D36303632373039363634373735322F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1774358357.222:1988): pid=40697 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1774358357.223:1989): pid=40697 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358357.664:1990): pid=40697 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1774358357.664:1991): pid=40697 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358357.666:1992): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358357.666:1993): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358357.675:1994): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358357.675:1995): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358357.676:1996): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=40706 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358357.694:1997): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358357.694:1998): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358357.850:1999): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358357.850:2000): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358357.851:2001): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=40726 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358357.868:2002): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358357.868:2003): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358357.877:2004): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358357.877:2005): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358357.878:2006): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=40743 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358357.900:2007): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358357.900:2008): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358357.915:2009): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358357.915:2010): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358357.915:2011): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=40767 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358357.946:2012): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358357.946:2013): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358357.955:2014): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358357.955:2015): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358357.956:2016): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=40784 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358357.974:2017): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358357.974:2018): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358357.983:2019): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358357.983:2020): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358357.984:2021): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=40802 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1774358358.011:2022): pid=40820 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1774358358.011:2023): pid=40820 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B6E62716A63677A756C726E786B786A666C6A66686B7476766A79747A636D79203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313737343335383335372E3837303838312D34303732342D3238313435343531343637373834392F416E736962616C6C5A5F646E662E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1774358358.012:2024): pid=40820 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1774358358.013:2025): pid=40820 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=MAC_POLICY_LOAD msg=audit(1774358372.188:2026): auid=1000 ses=26 lsm=selinux res=1AUID="rocky"
type=SYSCALL msg=audit(1774358372.188:2026): arch=c000003e syscall=1 success=yes exit=3496033 a0=4 a1=7f0b3b600000 a2=355861 a3=0 items=0 ppid=40868 pid=40875 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=26 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:unconfined_r:load_policy_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358372.188:2026): proctitle="/usr/sbin/load_policy"
type=MAC_POLICY_LOAD msg=audit(1774358379.356:2027): auid=1000 ses=26 lsm=selinux res=1AUID="rocky"
type=SYSCALL msg=audit(1774358379.356:2027): arch=c000003e syscall=1 success=yes exit=3550790 a0=4 a1=7f3a0cc00000 a2=362e46 a3=0 items=0 ppid=40868 pid=40882 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=26 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:unconfined_r:load_policy_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358379.356:2027): proctitle="/usr/sbin/load_policy"
type=MAC_POLICY_LOAD msg=audit(1774358386.477:2028): auid=1000 ses=26 lsm=selinux res=1AUID="rocky"
type=SYSCALL msg=audit(1774358386.477:2028): arch=c000003e syscall=1 success=yes exit=3551407 a0=4 a1=7fe81d000000 a2=3630af a3=0 items=0 ppid=40868 pid=40889 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=26 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:unconfined_r:load_policy_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358386.477:2028): proctitle="/usr/sbin/load_policy"
type=MAC_CONFIG_CHANGE msg=audit(1774358387.518:2029): bool=virt_use_nfs val=1 old_val=0 auid=1000 ses=26AUID="rocky"
type=SYSCALL msg=audit(1774358387.518:2029): arch=c000003e syscall=1 success=yes exit=2 a0=4 a1=7ffefa74b9ae a2=2 a3=0 items=0 ppid=40894 pid=40895 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=26 comm="setsebool" exe="/usr/sbin/setsebool" subj=unconfined_u:unconfined_r:setsebool_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358387.518:2029): proctitle=2F7573722F7362696E2F7365747365626F6F6C002D50002D4E00766972745F7573655F6E66733D3100766972745F73616E64626F785F7573655F616C6C5F636170733D31
type=MAC_POLICY_LOAD msg=audit(1774358395.922:2030): auid=1000 ses=26 lsm=selinux res=1AUID="rocky"
type=SYSCALL msg=audit(1774358395.922:2030): arch=c000003e syscall=1 success=yes exit=3598094 a0=4 a1=7fdaa6000000 a2=36e70e a3=0 items=0 ppid=40894 pid=40908 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=26 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:unconfined_r:load_policy_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358395.922:2030): proctitle="/usr/sbin/load_policy"
type=ADD_GROUP msg=audit(1774358396.969:2031): pid=40917 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-group id=990 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" ID="docker"
type=GRP_MGMT msg=audit(1774358396.974:2032): pid=40917 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-shadow-group id=990 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" ID="docker"
type=SERVICE_START msg=audit(1774358415.865:2033): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-rb25fad048dcb4b489adbe5e36bc80f5c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1774358416.013:2034): prog-id=91 op=LOAD
type=BPF msg=audit(1774358416.013:2035): prog-id=79 op=UNLOAD
type=BPF msg=audit(1774358416.013:2036): prog-id=92 op=LOAD
type=BPF msg=audit(1774358416.013:2037): prog-id=93 op=LOAD
type=BPF msg=audit(1774358416.013:2038): prog-id=80 op=UNLOAD
type=BPF msg=audit(1774358416.013:2039): prog-id=81 op=UNLOAD
type=BPF msg=audit(1774358416.014:2040): prog-id=94 op=LOAD
type=BPF msg=audit(1774358416.014:2041): prog-id=95 op=LOAD
type=BPF msg=audit(1774358416.014:2042): prog-id=82 op=UNLOAD
type=BPF msg=audit(1774358416.014:2043): prog-id=83 op=UNLOAD
type=BPF msg=audit(1774358416.015:2044): prog-id=96 op=LOAD
type=BPF msg=audit(1774358416.015:2045): prog-id=97 op=LOAD
type=BPF msg=audit(1774358416.015:2046): prog-id=84 op=UNLOAD
type=BPF msg=audit(1774358416.015:2047): prog-id=85 op=UNLOAD
type=BPF msg=audit(1774358416.017:2048): prog-id=98 op=LOAD
type=BPF msg=audit(1774358416.017:2049): prog-id=86 op=UNLOAD
type=BPF msg=audit(1774358416.019:2050): prog-id=99 op=LOAD
type=BPF msg=audit(1774358416.020:2051): prog-id=87 op=UNLOAD
type=BPF msg=audit(1774358416.020:2052): prog-id=100 op=LOAD
type=BPF msg=audit(1774358416.020:2053): prog-id=101 op=LOAD
type=BPF msg=audit(1774358416.020:2054): prog-id=88 op=UNLOAD
type=BPF msg=audit(1774358416.020:2055): prog-id=89 op=UNLOAD
type=BPF msg=audit(1774358416.020:2056): prog-id=102 op=LOAD
type=BPF msg=audit(1774358416.020:2057): prog-id=90 op=UNLOAD
type=SOFTWARE_UPDATE msg=audit(1774358416.037:2058): pid=40822 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="passt-0^20250512.g8ec1341-4.el9_7.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358416.037:2059): pid=40822 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="passt-selinux-0^20250512.g8ec1341-4.el9_7.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358416.037:2060): pid=40822 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="docker-buildx-plugin-0:0.31.1-1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358416.037:2061): pid=40822 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="docker-compose-plugin-0:5.1.1-1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358416.037:2062): pid=40822 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="fuse3-libs-3.10.2-9.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358416.037:2063): pid=40822 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="container-selinux-3:2.232.1-1.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358416.037:2064): pid=40822 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="containerd.io-2.2.2-1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358416.037:2065): pid=40822 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="docker-ce-cli-1:29.3.0-1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358416.037:2066): pid=40822 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="iptables-legacy-libs-1.8.10-4.1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358416.037:2067): pid=40822 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="iptables-legacy-1.8.10-4.1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358416.037:2068): pid=40822 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="fuse-common-3.10.2-9.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358416.037:2069): pid=40822 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="fuse3-3.10.2-9.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358416.037:2070): pid=40822 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="fuse-overlayfs-1.16-1.el9_7.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358416.037:2071): pid=40822 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="docker-ce-3:25.0.3-1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358416.037:2072): pid=40822 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="docker-ce-rootless-extras-0:29.3.0-1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SERVICE_START msg=audit(1774358416.621:2073): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1774358416.621:2074): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1774358416.643:2075): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-rb25fad048dcb4b489adbe5e36bc80f5c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1774358416.698:2076): pid=40820 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1774358416.698:2077): pid=40820 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358416.701:2078): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358416.701:2079): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358416.710:2080): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358416.710:2081): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358416.710:2082): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=42637 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358416.728:2083): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358416.728:2084): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358416.887:2085): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358416.887:2086): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358416.888:2087): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=42657 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358416.905:2088): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358416.905:2089): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358416.914:2090): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358416.914:2091): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358416.915:2092): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=42674 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358416.935:2093): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358416.935:2094): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358416.948:2095): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358416.948:2096): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358416.949:2097): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=42698 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358416.978:2098): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358416.978:2099): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358416.988:2100): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358416.988:2101): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358416.989:2102): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=42715 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358417.011:2103): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358417.011:2104): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358417.021:2105): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358417.021:2106): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358417.022:2107): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=42733 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1774358417.052:2108): pid=42751 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1774358417.052:2109): pid=42751 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6963616C6E64736177787763666B6B6D6D7679666C6D7A646A737375636A686E203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313737343335383431362E393037353634362D34323635352D3130373332333232353833303435312F416E736962616C6C5A5F646E662E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1774358417.053:2110): pid=42751 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1774358417.055:2111): pid=42751 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=BPF msg=audit(1774358418.400:2112): prog-id=103 op=LOAD
type=BPF msg=audit(1774358418.400:2113): prog-id=91 op=UNLOAD
type=BPF msg=audit(1774358418.400:2114): prog-id=104 op=LOAD
type=BPF msg=audit(1774358418.400:2115): prog-id=105 op=LOAD
type=BPF msg=audit(1774358418.400:2116): prog-id=92 op=UNLOAD
type=BPF msg=audit(1774358418.400:2117): prog-id=93 op=UNLOAD
type=BPF msg=audit(1774358418.401:2118): prog-id=106 op=LOAD
type=BPF msg=audit(1774358418.401:2119): prog-id=107 op=LOAD
type=BPF msg=audit(1774358418.401:2120): prog-id=94 op=UNLOAD
type=BPF msg=audit(1774358418.401:2121): prog-id=95 op=UNLOAD
type=BPF msg=audit(1774358418.402:2122): prog-id=108 op=LOAD
type=BPF msg=audit(1774358418.402:2123): prog-id=109 op=LOAD
type=BPF msg=audit(1774358418.402:2124): prog-id=96 op=UNLOAD
type=BPF msg=audit(1774358418.402:2125): prog-id=97 op=UNLOAD
type=BPF msg=audit(1774358418.403:2126): prog-id=110 op=LOAD
type=BPF msg=audit(1774358418.403:2127): prog-id=98 op=UNLOAD
type=BPF msg=audit(1774358418.405:2128): prog-id=111 op=LOAD
type=BPF msg=audit(1774358418.405:2129): prog-id=99 op=UNLOAD
type=BPF msg=audit(1774358418.405:2130): prog-id=112 op=LOAD
type=BPF msg=audit(1774358418.405:2131): prog-id=113 op=LOAD
type=BPF msg=audit(1774358418.405:2132): prog-id=100 op=UNLOAD
type=BPF msg=audit(1774358418.405:2133): prog-id=101 op=UNLOAD
type=BPF msg=audit(1774358418.406:2134): prog-id=114 op=LOAD
type=BPF msg=audit(1774358418.406:2135): prog-id=102 op=UNLOAD
type=SERVICE_START msg=audit(1774358418.431:2136): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r3a3434583a87498399645f0424d2cfdd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SOFTWARE_UPDATE msg=audit(1774358418.446:2137): pid=42753 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=remove sw="cloud-init-23.4-19.el9.0.2.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358418.446:2138): pid=42753 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=remove sw="cockpit-system-323.1-1.el9_5.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358418.446:2139): pid=42753 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=remove sw="sos-4.7.2-3.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358418.446:2140): pid=42753 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=remove sw="nfs-utils-1:2.5.4-27.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358418.446:2141): pid=42753 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=remove sw="python3-pyyaml-5.4.1-6.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1774358418.869:2142): pid=42751 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1774358418.870:2143): pid=42751 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358418.872:2144): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358418.872:2145): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358418.883:2146): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358418.883:2147): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358418.883:2148): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=43081 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358418.903:2149): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358418.903:2150): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=SERVICE_START msg=audit(1774358418.988:2151): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1774358418.988:2152): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1774358419.022:2153): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r3a3434583a87498399645f0424d2cfdd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1774358419.073:2154): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358419.073:2155): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358419.074:2156): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=43102 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358419.090:2157): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358419.090:2158): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358419.099:2159): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358419.099:2160): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358419.100:2161): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=43119 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358419.120:2162): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358419.120:2163): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358419.133:2164): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358419.133:2165): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358419.134:2166): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=43143 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358419.161:2167): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358419.161:2168): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358419.171:2169): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358419.171:2170): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358419.172:2171): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=43160 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358419.191:2172): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358419.191:2173): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358419.201:2174): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358419.201:2175): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358419.202:2176): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=43178 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1774358419.229:2177): pid=43196 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1774358419.230:2178): pid=43196 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6178687567616A756E79696675696C6D7A686D6F72666B636B72746F63656573203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313737343335383431392E3039323636392D34333039392D3233323335353931363730373038322F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1774358419.230:2179): pid=43196 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1774358419.232:2180): pid=43196 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358419.922:2181): pid=43196 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1774358419.922:2182): pid=43196 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358419.925:2183): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358419.925:2184): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358419.933:2185): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358419.933:2186): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358419.934:2187): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=43204 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358419.952:2188): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358419.952:2189): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358420.102:2190): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358420.102:2191): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358420.103:2192): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=43224 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358420.121:2193): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358420.121:2194): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358420.129:2195): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358420.129:2196): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358420.129:2197): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=43241 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358420.150:2198): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358420.150:2199): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358420.162:2200): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358420.162:2201): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358420.163:2202): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=43265 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358420.189:2203): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358420.189:2204): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358420.197:2205): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358420.197:2206): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358420.198:2207): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=43282 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358420.215:2208): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358420.215:2209): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358420.224:2210): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358420.224:2211): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358420.225:2212): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=43300 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1774358420.249:2213): pid=43318 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1774358420.250:2214): pid=43318 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B77626E746F727A6479766D7169656A626362666B6D77647A7568696164656C203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313737343335383432302E31323330332D34333232322D3232333638383939373431303730392F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1774358420.250:2215): pid=43318 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1774358420.251:2216): pid=43318 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358424.388:2217): pid=43318 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1774358424.388:2218): pid=43318 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358424.391:2219): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358424.391:2220): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358424.400:2221): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358424.400:2222): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358424.400:2223): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=43333 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358424.421:2224): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358424.421:2225): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358424.592:2226): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358424.592:2227): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358424.593:2228): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=43353 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358424.610:2229): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358424.610:2230): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358424.618:2231): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358424.618:2232): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358424.619:2233): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=43370 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358424.640:2234): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358424.641:2235): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358424.654:2236): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358424.654:2237): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358424.655:2238): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=43394 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358424.681:2239): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358424.681:2240): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358424.689:2241): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358424.689:2242): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358424.690:2243): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=43411 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358424.708:2244): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358424.708:2245): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358424.717:2246): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358424.717:2247): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358424.718:2248): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=43429 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1774358424.743:2249): pid=43447 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1774358424.743:2250): pid=43447 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6973776F6B6D63756B6A69757665636C6561656D686D667966616174726E757A203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313737343335383432342E363132333235372D34333335312D3136303534393538333036333836332F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1774358424.743:2251): pid=43447 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1774358424.744:2252): pid=43447 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358424.873:2253): pid=43447 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1774358424.874:2254): pid=43447 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358424.876:2255): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358424.876:2256): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358424.887:2257): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358424.887:2258): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358424.888:2259): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=43452 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358424.907:2260): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358424.907:2261): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358424.916:2262): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358424.916:2263): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358424.917:2264): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=43469 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358424.935:2265): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358424.935:2266): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358425.039:2267): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358425.039:2268): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358425.040:2269): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=43488 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358425.068:2270): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358425.068:2271): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358425.078:2272): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358425.078:2273): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358425.079:2274): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=43505 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358425.100:2275): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358425.100:2276): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358425.113:2277): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358425.113:2278): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358425.114:2279): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=43523 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1774358425.144:2280): pid=43541 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1774358425.145:2281): pid=43541 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6768766C6C6C706F646D787866696977776B787766667262736673777A727973203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313737343335383432342E363132333235372D34333335312D3136303534393538333036333836332F416E736962616C6C5A5F636F70792E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1774358425.145:2282): pid=43541 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1774358425.147:2283): pid=43541 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358425.320:2284): pid=43541 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1774358425.320:2285): pid=43541 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358425.322:2286): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358425.322:2287): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358425.332:2288): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358425.332:2289): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358425.332:2290): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=43545 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358425.351:2291): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358425.351:2292): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358425.610:2293): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358425.610:2294): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358425.611:2295): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=43569 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358425.628:2296): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358425.628:2297): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358425.641:2298): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358425.641:2299): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358425.641:2300): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=43586 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358425.663:2301): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358425.663:2302): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358425.678:2303): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358425.678:2304): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358425.679:2305): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=43610 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358425.706:2306): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358425.706:2307): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358425.715:2308): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358425.715:2309): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358425.716:2310): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=43627 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358425.737:2311): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358425.738:2312): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358425.748:2313): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358425.748:2314): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358425.749:2315): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=43645 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1774358425.776:2316): pid=43663 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1774358425.776:2317): pid=43663 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D707479706165686971747764706279687A6F6F6D79776D667A7A777A716E6B6C203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313737343335383432352E363331323133372D34333536372D37333132373635343739323130312F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1774358425.776:2318): pid=43663 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1774358425.778:2319): pid=43663 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358425.923:2320): pid=43663 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1774358425.923:2321): pid=43663 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358425.925:2322): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358425.925:2323): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358425.934:2324): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358425.934:2325): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358425.935:2326): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=43667 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358425.954:2327): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358425.954:2328): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358426.089:2329): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358426.089:2330): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358426.090:2331): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=43687 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358426.108:2332): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358426.108:2333): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358426.116:2334): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358426.116:2335): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358426.117:2336): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=43704 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358426.138:2337): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358426.138:2338): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358426.153:2339): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358426.153:2340): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358426.154:2341): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=43728 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358426.181:2342): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358426.181:2343): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358426.190:2344): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358426.190:2345): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358426.191:2346): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=43745 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358426.209:2347): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358426.209:2348): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358426.219:2349): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358426.219:2350): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358426.220:2351): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=43763 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1774358426.247:2352): pid=43781 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1774358426.247:2353): pid=43781 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D69616A6B7876666A7A7275686C72686D6D6C756776757065696B61626A6C7873203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313737343335383432362E313130333133342D34333638352D36363038313934363431333538362F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1774358426.247:2354): pid=43781 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1774358426.248:2355): pid=43781 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358426.407:2356): pid=43781 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1774358426.407:2357): pid=43781 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358426.409:2358): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358426.409:2359): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358426.418:2360): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358426.418:2361): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358426.419:2362): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=43785 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358426.437:2363): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358426.437:2364): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358426.582:2365): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358426.582:2366): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358426.583:2367): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=43805 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358426.604:2368): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358426.604:2369): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358426.612:2370): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358426.612:2371): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358426.613:2372): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=43822 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358426.633:2373): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358426.633:2374): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358426.646:2375): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358426.646:2376): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358426.647:2377): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=43846 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358426.674:2378): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358426.675:2379): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358426.684:2380): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358426.684:2381): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358426.685:2382): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=43863 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358426.703:2383): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358426.703:2384): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358426.712:2385): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358426.712:2386): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358426.713:2387): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=43881 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1774358426.739:2388): pid=43899 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1774358426.739:2389): pid=43899 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D78776D7A6277737562686F797A7079686265677A7165756E6D62716668616A68203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313737343335383432362E363036313932342D34333830332D3230383031383039363431323938382F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1774358426.740:2390): pid=43899 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1774358426.741:2391): pid=43899 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358427.098:2392): pid=43899 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1774358427.098:2393): pid=43899 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358427.101:2394): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358427.101:2395): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358427.110:2396): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358427.110:2397): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358427.111:2398): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=43904 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358427.132:2399): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358427.132:2400): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358427.656:2401): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358427.656:2402): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358427.657:2403): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=43930 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358427.674:2404): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358427.674:2405): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358427.683:2406): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358427.683:2407): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358427.683:2408): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=43947 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358427.705:2409): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358427.705:2410): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358427.719:2411): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358427.719:2412): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358427.720:2413): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=43971 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358427.749:2414): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358427.749:2415): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358427.759:2416): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358427.759:2417): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358427.759:2418): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=43988 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358427.779:2419): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358427.779:2420): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358427.788:2421): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358427.788:2422): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358427.789:2423): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=44006 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1774358427.815:2424): pid=44024 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1774358427.815:2425): pid=44024 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D69676961736D686B756367737770756E776A7367616B79776C6A707770766D6C203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313737343335383432372E3637363536312D34333932382D3136303136373038343536383839352F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1774358427.815:2426): pid=44024 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1774358427.817:2427): pid=44024 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358427.960:2428): pid=44024 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1774358427.960:2429): pid=44024 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358427.962:2430): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358427.962:2431): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358427.976:2432): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358427.976:2433): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358427.977:2434): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=44031 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358427.997:2435): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358427.997:2436): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358428.008:2437): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358428.008:2438): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358428.009:2439): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=44048 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358428.027:2440): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358428.027:2441): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358428.040:2442): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358428.040:2443): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358428.041:2444): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=44067 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358428.069:2445): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358428.069:2446): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358428.077:2447): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358428.077:2448): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358428.078:2449): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=44084 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358428.098:2450): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358428.098:2451): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358428.107:2452): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358428.107:2453): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358428.108:2454): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=44102 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1774358428.133:2455): pid=44120 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1774358428.134:2456): pid=44120 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D676E726964626C70666277766979716375747366787261746C706878766E6A65203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313737343335383432372E3637363536312D34333932382D3136303136373038343536383839352F416E736962616C6C5A5F636F70792E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1774358428.134:2457): pid=44120 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1774358428.135:2458): pid=44120 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358428.273:2459): pid=44120 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1774358428.273:2460): pid=44120 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358428.275:2461): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358428.275:2462): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358428.284:2463): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358428.284:2464): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358428.285:2465): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=44124 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358428.302:2466): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358428.302:2467): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358428.454:2468): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358428.454:2469): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358428.455:2470): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=44144 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358428.475:2471): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358428.475:2472): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358428.486:2473): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358428.486:2474): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358428.487:2475): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=44161 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358428.507:2476): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358428.507:2477): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358428.520:2478): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358428.520:2479): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358428.521:2480): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=44185 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358428.548:2481): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358428.548:2482): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358428.557:2483): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358428.557:2484): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358428.558:2485): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=44202 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358428.577:2486): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358428.577:2487): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358428.586:2488): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358428.586:2489): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358428.587:2490): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=44220 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1774358428.612:2491): pid=44238 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1774358428.612:2492): pid=44238 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A66656F7762716B6862717967696D73636B79726F6F666773736767766F7670203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313737343335383432382E343737373835382D34343134322D3139333733323734383031333131322F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1774358428.612:2493): pid=44238 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1774358428.614:2494): pid=44238 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=BPF msg=audit(1774358428.863:2495): prog-id=115 op=LOAD
type=BPF msg=audit(1774358428.863:2496): prog-id=103 op=UNLOAD
type=BPF msg=audit(1774358428.863:2497): prog-id=116 op=LOAD
type=BPF msg=audit(1774358428.863:2498): prog-id=117 op=LOAD
type=BPF msg=audit(1774358428.863:2499): prog-id=104 op=UNLOAD
type=BPF msg=audit(1774358428.863:2500): prog-id=105 op=UNLOAD
type=BPF msg=audit(1774358428.863:2501): prog-id=118 op=LOAD
type=BPF msg=audit(1774358428.863:2502): prog-id=119 op=LOAD
type=BPF msg=audit(1774358428.864:2503): prog-id=106 op=UNLOAD
type=BPF msg=audit(1774358428.864:2504): prog-id=107 op=UNLOAD
type=BPF msg=audit(1774358428.864:2505): prog-id=120 op=LOAD
type=BPF msg=audit(1774358428.864:2506): prog-id=121 op=LOAD
type=BPF msg=audit(1774358428.864:2507): prog-id=108 op=UNLOAD
type=BPF msg=audit(1774358428.864:2508): prog-id=109 op=UNLOAD
type=BPF msg=audit(1774358428.865:2509): prog-id=122 op=LOAD
type=BPF msg=audit(1774358428.865:2510): prog-id=110 op=UNLOAD
type=BPF msg=audit(1774358428.867:2511): prog-id=123 op=LOAD
type=BPF msg=audit(1774358428.868:2512): prog-id=111 op=UNLOAD
type=BPF msg=audit(1774358428.868:2513): prog-id=124 op=LOAD
type=BPF msg=audit(1774358428.868:2514): prog-id=125 op=LOAD
type=BPF msg=audit(1774358428.868:2515): prog-id=112 op=UNLOAD
type=BPF msg=audit(1774358428.868:2516): prog-id=113 op=UNLOAD
type=BPF msg=audit(1774358428.868:2517): prog-id=126 op=LOAD
type=BPF msg=audit(1774358428.868:2518): prog-id=114 op=UNLOAD
type=USER_END msg=audit(1774358428.883:2519): pid=44238 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1774358428.884:2520): pid=44238 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358428.886:2521): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358428.886:2522): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358428.898:2523): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358428.898:2524): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358428.899:2525): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=44264 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358428.919:2526): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358428.919:2527): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358429.096:2528): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358429.096:2529): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358429.097:2530): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=44284 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358429.114:2531): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358429.114:2532): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358429.122:2533): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358429.122:2534): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358429.123:2535): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=44301 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358429.144:2536): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358429.144:2537): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358429.158:2538): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358429.158:2539): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358429.159:2540): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=44325 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358429.197:2541): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358429.197:2542): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358429.207:2543): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358429.207:2544): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358429.208:2545): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=44342 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358429.227:2546): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358429.227:2547): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358429.237:2548): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358429.237:2549): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358429.238:2550): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=44360 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1774358429.265:2551): pid=44378 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1774358429.265:2552): pid=44378 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D79627A746E7377666B7673656E6D6C7273746668696B6272696A797269697167203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313737343335383432392E313136323038362D34343238322D3130313130313130313935343430322F416E736962616C6C5A5F73797374656D642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1774358429.266:2553): pid=44378 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1774358429.267:2554): pid=44378 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=BPF msg=audit(1774358429.645:2555): prog-id=127 op=LOAD
type=BPF msg=audit(1774358429.645:2556): prog-id=115 op=UNLOAD
type=BPF msg=audit(1774358429.645:2557): prog-id=128 op=LOAD
type=BPF msg=audit(1774358429.645:2558): prog-id=129 op=LOAD
type=BPF msg=audit(1774358429.645:2559): prog-id=116 op=UNLOAD
type=BPF msg=audit(1774358429.646:2560): prog-id=117 op=UNLOAD
type=BPF msg=audit(1774358429.647:2561): prog-id=130 op=LOAD
type=BPF msg=audit(1774358429.647:2562): prog-id=131 op=LOAD
type=BPF msg=audit(1774358429.647:2563): prog-id=118 op=UNLOAD
type=BPF msg=audit(1774358429.647:2564): prog-id=119 op=UNLOAD
type=BPF msg=audit(1774358429.648:2565): prog-id=132 op=LOAD
type=BPF msg=audit(1774358429.648:2566): prog-id=122 op=UNLOAD
type=BPF msg=audit(1774358429.649:2567): prog-id=133 op=LOAD
type=BPF msg=audit(1774358429.649:2568): prog-id=123 op=UNLOAD
type=BPF msg=audit(1774358429.649:2569): prog-id=134 op=LOAD
type=BPF msg=audit(1774358429.649:2570): prog-id=135 op=LOAD
type=BPF msg=audit(1774358429.649:2571): prog-id=124 op=UNLOAD
type=BPF msg=audit(1774358429.649:2572): prog-id=125 op=UNLOAD
type=BPF msg=audit(1774358429.650:2573): prog-id=136 op=LOAD
type=BPF msg=audit(1774358429.650:2574): prog-id=126 op=UNLOAD
type=BPF msg=audit(1774358429.650:2575): prog-id=137 op=LOAD
type=BPF msg=audit(1774358429.650:2576): prog-id=138 op=LOAD
type=BPF msg=audit(1774358429.650:2577): prog-id=120 op=UNLOAD
type=BPF msg=audit(1774358429.650:2578): prog-id=121 op=UNLOAD
type=BPF msg=audit(1774358429.652:2579): prog-id=139 op=LOAD
type=BPF msg=audit(1774358429.652:2580): prog-id=140 op=LOAD
type=BPF msg=audit(1774358429.652:2581): prog-id=137 op=UNLOAD
type=BPF msg=audit(1774358429.652:2582): prog-id=138 op=UNLOAD
type=BPF msg=audit(1774358429.653:2583): prog-id=141 op=LOAD
type=BPF msg=audit(1774358429.653:2584): prog-id=132 op=UNLOAD
type=BPF msg=audit(1774358429.655:2585): prog-id=142 op=LOAD
type=BPF msg=audit(1774358429.655:2586): prog-id=133 op=UNLOAD
type=BPF msg=audit(1774358429.655:2587): prog-id=143 op=LOAD
type=BPF msg=audit(1774358429.656:2588): prog-id=144 op=LOAD
type=BPF msg=audit(1774358429.656:2589): prog-id=134 op=UNLOAD
type=BPF msg=audit(1774358429.656:2590): prog-id=135 op=UNLOAD
type=BPF msg=audit(1774358429.656:2591): prog-id=145 op=LOAD
type=BPF msg=audit(1774358429.656:2592): prog-id=136 op=UNLOAD
type=BPF msg=audit(1774358429.657:2593): prog-id=146 op=LOAD
type=BPF msg=audit(1774358429.657:2594): prog-id=142 op=UNLOAD
type=BPF msg=audit(1774358429.657:2595): prog-id=147 op=LOAD
type=BPF msg=audit(1774358429.657:2596): prog-id=148 op=LOAD
type=BPF msg=audit(1774358429.657:2597): prog-id=143 op=UNLOAD
type=BPF msg=audit(1774358429.657:2598): prog-id=144 op=UNLOAD
type=BPF msg=audit(1774358429.658:2599): prog-id=149 op=LOAD
type=BPF msg=audit(1774358429.658:2600): prog-id=145 op=UNLOAD
type=SERVICE_START msg=audit(1774358429.753:2601): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=containerd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=NETFILTER_CFG msg=audit(1774358430.153:2602): table=filter family=2 entries=0 op=xt_register pid=44468 subj=system_u:system_r:kmod_t:s0 comm="modprobe"
type=SYSCALL msg=audit(1774358430.153:2602): arch=c000003e syscall=175 success=yes exit=0 a0=55852f7f0ca0 a1=35e6 a2=55852e887962 a3=5 items=0 ppid=42 pid=44468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="modprobe" exe="/usr/bin/kmod" subj=system_u:system_r:kmod_t:s0 key=(null)ARCH=x86_64 SYSCALL=init_module AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358430.153:2602): proctitle=2F7573722F7362696E2F6D6F6470726F6265002D71002D2D0069707461626C655F66696C746572
type=NETFILTER_CFG msg=audit(1774358430.186:2603): table=nat family=2 entries=0 op=xt_register pid=44472 subj=system_u:system_r:kmod_t:s0 comm="modprobe"
type=SYSCALL msg=audit(1774358430.186:2603): arch=c000003e syscall=175 success=yes exit=0 a0=55e9a7a16450 a1=3bfe a2=55e9a5e62962 a3=5 items=0 ppid=42 pid=44472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="modprobe" exe="/usr/bin/kmod" subj=system_u:system_r:kmod_t:s0 key=(null)ARCH=x86_64 SYSCALL=init_module AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358430.186:2603): proctitle=2F7573722F7362696E2F6D6F6470726F6265002D71002D2D0069707461626C655F6E6174
type=NETFILTER_CFG msg=audit(1774358430.201:2604): table=nat family=2 entries=5 op=xt_replace pid=44488 subj=system_u:system_r:iptables_t:s0 comm="iptables"
type=SYSCALL msg=audit(1774358430.201:2604): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55c4d5dc0a80 items=0 ppid=44422 pid=44488 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358430.201:2604): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552
type=NETFILTER_CFG msg=audit(1774358430.203:2605): table=filter family=2 entries=4 op=xt_replace pid=44490 subj=system_u:system_r:iptables_t:s0 comm="iptables"
type=SYSCALL msg=audit(1774358430.203:2605): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=5617fe4c7960 items=0 ppid=44422 pid=44490 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358430.203:2605): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552
type=NETFILTER_CFG msg=audit(1774358430.204:2606): table=filter family=2 entries=6 op=xt_replace pid=44492 subj=system_u:system_r:iptables_t:s0 comm="iptables"
type=SYSCALL msg=audit(1774358430.204:2606): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=5603f702cb50 items=0 ppid=44422 pid=44492 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358430.204:2606): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31
type=NETFILTER_CFG msg=audit(1774358430.206:2607): table=filter family=2 entries=8 op=xt_replace pid=44494 subj=system_u:system_r:iptables_t:s0 comm="iptables"
type=SYSCALL msg=audit(1774358430.206:2607): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=56465b2c2d30 items=0 ppid=44422 pid=44494 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358430.206:2607): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32
type=NETFILTER_CFG msg=audit(1774358430.208:2608): table=filter family=2 entries=10 op=xt_replace pid=44496 subj=system_u:system_r:iptables_t:s0 comm="iptables"
type=SYSCALL msg=audit(1774358430.208:2608): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55b21fc715a0 items=0 ppid=44422 pid=44496 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358430.208:2608): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E
type=NETFILTER_CFG msg=audit(1774358430.209:2609): table=filter family=2 entries=11 op=xt_replace pid=44498 subj=system_u:system_r:iptables_t:s0 comm="iptables"
type=SYSCALL msg=audit(1774358430.209:2609): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55ee9aafe720 items=0 ppid=44422 pid=44498 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358430.209:2609): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E
type=NETFILTER_CFG msg=audit(1774358430.210:2610): table=filter family=2 entries=12 op=xt_replace pid=44499 subj=system_u:system_r:iptables_t:s0 comm="iptables"
type=SYSCALL msg=audit(1774358430.210:2610): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55d8a9f12120 items=0 ppid=44422 pid=44499 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358430.210:2610): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D5000464F52574152440044524F50
type=NETFILTER_CFG msg=audit(1774358430.224:2611): table=filter family=2 entries=12 op=xt_replace pid=44501 subj=system_u:system_r:iptables_t:s0 comm="iptables"
type=SYSCALL msg=audit(1774358430.224:2611): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55dc372271e0 items=0 ppid=44422 pid=44501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358430.224:2611): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552
type=NETFILTER_CFG msg=audit(1774358430.225:2612): table=filter family=2 entries=14 op=xt_replace pid=44503 subj=system_u:system_r:iptables_t:s0 comm="iptables"
type=SYSCALL msg=audit(1774358430.225:2612): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=5641c9d7ca70 items=0 ppid=44422 pid=44503 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358430.225:2612): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E
type=NETFILTER_CFG msg=audit(1774358430.227:2613): table=filter family=2 entries=15 op=xt_replace pid=44505 subj=system_u:system_r:iptables_t:s0 comm="iptables"
type=SYSCALL msg=audit(1774358430.227:2613): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55f7e1488bf0 items=0 ppid=44422 pid=44505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358430.227:2613): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552
type=NETFILTER_CFG msg=audit(1774358430.235:2614): table=filter family=2 entries=16 op=xt_replace pid=44509 subj=system_u:system_r:iptables_t:s0 comm="iptables"
type=SYSCALL msg=audit(1774358430.235:2614): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=5577787a6e10 items=0 ppid=44422 pid=44509 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358430.235:2614): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552
type=NETFILTER_CFG msg=audit(1774358430.236:2615): table=filter family=2 entries=15 op=xt_replace pid=44510 subj=system_u:system_r:iptables_t:s0 comm="iptables"
type=SYSCALL msg=audit(1774358430.236:2615): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55f2079d2bf0 items=0 ppid=44422 pid=44510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358430.236:2615): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552
type=NETFILTER_CFG msg=audit(1774358430.258:2616): table=nat family=2 entries=7 op=xt_replace pid=44517 subj=system_u:system_r:iptables_t:s0 comm="iptables"
type=SYSCALL msg=audit(1774358430.258:2616): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=559a17db0990 items=0 ppid=44422 pid=44517 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358430.258:2616): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445
type=NETFILTER_CFG msg=audit(1774358430.259:2617): table=nat family=2 entries=8 op=xt_replace pid=44520 subj=system_u:system_r:iptables_t:s0 comm="iptables"
type=SYSCALL msg=audit(1774358430.259:2617): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55de44b3c4b0 items=0 ppid=44422 pid=44520 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358430.259:2617): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E
type=NETFILTER_CFG msg=audit(1774358430.263:2618): table=filter family=2 entries=16 op=xt_replace pid=44524 subj=system_u:system_r:iptables_t:s0 comm="iptables"
type=SYSCALL msg=audit(1774358430.263:2618): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55cc8392bd60 items=0 ppid=44422 pid=44524 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358430.263:2618): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054
type=NETFILTER_CFG msg=audit(1774358430.265:2619): table=filter family=2 entries=17 op=xt_replace pid=44526 subj=system_u:system_r:iptables_t:s0 comm="iptables"
type=SYSCALL msg=audit(1774358430.265:2619): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=556900efbed0 items=0 ppid=44422 pid=44526 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358430.265:2619): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054
type=NETFILTER_CFG msg=audit(1774358430.267:2620): table=nat family=2 entries=9 op=xt_replace pid=44528 subj=system_u:system_r:iptables_t:s0 comm="iptables"
type=SYSCALL msg=audit(1774358430.267:2620): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=5626c24fe330 items=0 ppid=44422 pid=44528 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358430.267:2620): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552
type=NETFILTER_CFG msg=audit(1774358430.269:2621): table=nat family=2 entries=10 op=xt_replace pid=44530 subj=system_u:system_r:iptables_t:s0 comm="iptables"
type=SYSCALL msg=audit(1774358430.269:2621): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=555976a56500 items=0 ppid=44422 pid=44530 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358430.269:2621): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38
type=NETFILTER_CFG msg=audit(1774358430.271:2622): table=filter family=2 entries=18 op=xt_replace pid=44532 subj=system_u:system_r:iptables_t:s0 comm="iptables"
type=SYSCALL msg=audit(1774358430.271:2622): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=5632f6f05050 items=0 ppid=44422 pid=44532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358430.271:2622): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552
type=NETFILTER_CFG msg=audit(1774358430.278:2623): table=filter family=2 entries=19 op=xt_replace pid=44535 subj=system_u:system_r:iptables_t:s0 comm="iptables"
type=SYSCALL msg=audit(1774358430.278:2623): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55ea427fe1d0 items=0 ppid=44422 pid=44535 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358430.278:2623): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054
type=NETFILTER_CFG msg=audit(1774358430.280:2624): table=filter family=2 entries=20 op=xt_replace pid=44537 subj=system_u:system_r:iptables_t:s0 comm="iptables"
type=SYSCALL msg=audit(1774358430.280:2624): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55d2b5c3e4f0 items=0 ppid=44422 pid=44537 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358430.280:2624): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31
type=NETFILTER_CFG msg=audit(1774358430.281:2625): table=filter family=2 entries=21 op=xt_replace pid=44539 subj=system_u:system_r:iptables_t:s0 comm="iptables"
type=SYSCALL msg=audit(1774358430.281:2625): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=5608a7c9a670 items=0 ppid=44422 pid=44539 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358430.281:2625): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32
type=NETFILTER_CFG msg=audit(1774358430.283:2626): table=filter family=2 entries=22 op=xt_replace pid=44541 subj=system_u:system_r:iptables_t:s0 comm="iptables"
type=SYSCALL msg=audit(1774358430.283:2626): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55bb440f27c0 items=0 ppid=44422 pid=44541 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358430.283:2626): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50
type=NETFILTER_CFG msg=audit(1774358430.294:2627): table=filter family=2 entries=23 op=xt_replace pid=44546 subj=system_u:system_r:iptables_t:s0 comm="iptables"
type=SYSCALL msg=audit(1774358430.294:2627): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=564d47fc19f0 items=0 ppid=44422 pid=44546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358430.294:2627): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552
type=NETFILTER_CFG msg=audit(1774358430.295:2628): table=filter family=2 entries=22 op=xt_replace pid=44547 subj=system_u:system_r:iptables_t:s0 comm="iptables"
type=SYSCALL msg=audit(1774358430.295:2628): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=560067d657d0 items=0 ppid=44422 pid=44547 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358430.295:2628): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552
type=SERVICE_START msg=audit(1774358430.302:2629): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1774358430.354:2630): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1774358430.374:2631): pid=44378 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1774358430.374:2632): pid=44378 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358430.377:2633): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358430.377:2634): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358430.387:2635): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358430.387:2636): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358430.388:2637): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=44583 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358430.408:2638): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358430.409:2639): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358430.692:2640): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358430.692:2641): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358430.693:2642): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=44609 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358430.713:2643): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358430.713:2644): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358430.722:2645): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358430.722:2646): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358430.723:2647): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=44626 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358430.745:2648): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358430.745:2649): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358430.764:2650): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358430.764:2651): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358430.765:2652): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=44650 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358430.805:2653): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358430.805:2654): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358430.814:2655): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358430.814:2656): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358430.815:2657): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=44667 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358430.833:2658): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358430.833:2659): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358430.842:2660): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358430.842:2661): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358430.844:2662): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=44685 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1774358430.871:2663): pid=44703 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1774358430.871:2664): pid=44703 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D796E706D6B6B706B6275777A6E6D6C6D62656E6C6B666C7566637479616F6570203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313737343335383433302E3731353035372D34343630372D3236373031363434343334343936342F416E736962616C6C5A5F73797374656D642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1774358430.871:2665): pid=44703 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1774358430.873:2666): pid=44703 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358431.144:2667): pid=44703 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1774358431.144:2668): pid=44703 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358431.147:2669): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358431.147:2670): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358431.156:2671): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358431.156:2672): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358431.157:2673): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=44709 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358431.175:2674): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358431.175:2675): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358437.789:2676): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358437.789:2677): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358437.790:2678): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=44939 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358437.807:2679): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358437.808:2680): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358437.816:2681): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358437.816:2682): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358437.817:2683): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=44956 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358437.837:2684): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358437.837:2685): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358438.046:2686): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358438.046:2687): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358438.047:2688): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=44979 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358438.068:2689): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358438.068:2690): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358438.076:2691): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358438.076:2692): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358438.077:2693): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=44998 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358438.126:2694): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358438.126:2695): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358438.140:2696): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358438.140:2697): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358438.141:2698): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=45017 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358438.180:2699): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358438.180:2700): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358438.190:2701): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358438.190:2702): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358438.191:2703): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=45034 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358438.213:2704): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358438.213:2705): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358438.224:2706): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358438.224:2707): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358438.225:2708): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=45052 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1774358438.251:2709): pid=45070 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1774358438.251:2710): pid=45070 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D6D7A6C6466786F736D6A6B6372626F796D736872696A68666770637A7A7964203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313737343335383433372E383039393931312D34343933372D3138363832373936383936383139322F416E736962616C6C5A5F73657475702E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1774358438.252:2711): pid=45070 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1774358438.253:2712): pid=45070 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358438.797:2713): pid=45070 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1774358438.797:2714): pid=45070 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358438.799:2715): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358438.799:2716): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358438.811:2717): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358438.811:2718): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358438.811:2719): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=45111 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358438.832:2720): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358438.832:2721): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358440.036:2722): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358440.036:2723): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358440.036:2724): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=45149 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358440.052:2725): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358440.052:2726): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358440.062:2727): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358440.062:2728): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358440.062:2729): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=45166 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358440.083:2730): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358440.083:2731): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358440.213:2732): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358440.213:2733): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358440.213:2734): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=45190 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358440.240:2735): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358440.240:2736): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358440.249:2737): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358440.249:2738): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358440.250:2739): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=45207 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358440.268:2740): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358440.268:2741): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358440.278:2742): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358440.278:2743): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358440.279:2744): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=45225 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1774358440.306:2745): pid=45243 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1774358440.306:2746): pid=45243 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D686761786E6E74616E70736C7268706E62636B786D636F6D616571727A69706E203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313737343335383434302E3035353030312D34353134372D36313939373334323532363231372F416E736962616C6C5A5F79756D5F7265706F7369746F72792E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1774358440.306:2747): pid=45243 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1774358440.307:2748): pid=45243 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=SERVICE_STOP msg=audit(1774358440.320:2749): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1774358440.443:2750): pid=45243 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1774358440.443:2751): pid=45243 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358440.444:2752): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358440.444:2753): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358440.453:2754): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358440.453:2755): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358440.454:2756): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=45247 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358440.472:2757): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358440.472:2758): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358440.699:2759): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358440.699:2760): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358440.699:2761): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=45269 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358440.717:2762): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358440.717:2763): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358440.725:2764): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358440.725:2765): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358440.727:2766): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=45286 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358440.747:2767): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358440.747:2768): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358440.843:2769): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358440.843:2770): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358440.844:2771): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=45310 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358440.873:2772): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358440.873:2773): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358440.881:2774): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358440.881:2775): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358440.883:2776): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=45327 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358440.902:2777): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358440.902:2778): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358440.911:2779): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358440.911:2780): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358440.911:2781): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=45345 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1774358440.936:2782): pid=45363 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1774358440.936:2783): pid=45363 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D756F68727478676D72797166656C706C76686961697A6A686C6B637A62776775203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313737343335383434302E3731393135392D34353236372D3236353539353731303131383731392F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1774358440.937:2784): pid=45363 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1774358440.938:2785): pid=45363 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358441.467:2786): pid=45363 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1774358441.468:2787): pid=45363 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358441.470:2788): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358441.470:2789): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358441.482:2790): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358441.482:2791): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358441.483:2792): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=45371 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358441.501:2793): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358441.501:2794): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358441.706:2795): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358441.706:2796): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358441.707:2797): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=45391 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358441.727:2798): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358441.727:2799): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358441.736:2800): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358441.736:2801): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358441.737:2802): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=45408 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358441.760:2803): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358441.760:2804): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358441.890:2805): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358441.890:2806): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358441.890:2807): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=45432 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358441.917:2808): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358441.917:2809): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358441.926:2810): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358441.926:2811): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358441.927:2812): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=45449 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358441.944:2813): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358441.944:2814): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358441.953:2815): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358441.953:2816): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358441.953:2817): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=45467 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1774358441.979:2818): pid=45485 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1774358441.979:2819): pid=45485 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D796762616279686B7469747566736D787479786F617A7A66636E62746971796C203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313737343335383434312E373238383636362D34353338392D36383434373338353037363930342F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1774358441.979:2820): pid=45485 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1774358441.980:2821): pid=45485 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358442.119:2822): pid=45485 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1774358442.119:2823): pid=45485 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358442.122:2824): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358442.122:2825): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358442.130:2826): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358442.130:2827): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358442.131:2828): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=45489 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358442.151:2829): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358442.151:2830): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358442.357:2831): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358442.358:2832): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358442.358:2833): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=45511 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358442.378:2834): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358442.378:2835): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358442.386:2836): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358442.386:2837): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358442.387:2838): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=45528 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358442.411:2839): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358442.411:2840): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358442.564:2841): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358442.564:2842): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358442.565:2843): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=45552 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358442.597:2844): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358442.597:2845): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358442.606:2846): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358442.606:2847): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358442.607:2848): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=45569 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358442.628:2849): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358442.628:2850): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358442.639:2851): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358442.639:2852): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358442.640:2853): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=45587 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1774358442.670:2854): pid=45605 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1774358442.671:2855): pid=45605 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D666862726375746969747779626971747271716D6D6573736668736A69756D6E203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313737343335383434322E333739303635332D34353530392D3237323937313938363637313338372F416E736962616C6C5A5F646E662E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1774358442.671:2856): pid=45605 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1774358442.673:2857): pid=45605 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358444.928:2858): pid=45607 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="kubectl-1.24.17-0.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1774358445.282:2859): pid=45605 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1774358445.282:2860): pid=45605 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358445.284:2861): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358445.284:2862): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358445.293:2863): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358445.293:2864): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358445.294:2865): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=45611 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358445.315:2866): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358445.315:2867): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358445.393:2868): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358445.393:2869): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358445.394:2870): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=45630 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358445.413:2871): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358445.413:2872): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358445.423:2873): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358445.423:2874): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358445.424:2875): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=45647 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358445.447:2876): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358445.447:2877): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358445.460:2878): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358445.460:2879): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358445.461:2880): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=45671 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358445.494:2881): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358445.494:2882): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358445.503:2883): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358445.503:2884): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358445.504:2885): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=45688 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358445.525:2886): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358445.525:2887): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358445.537:2888): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358445.537:2889): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358445.538:2890): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=45706 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1774358445.568:2891): pid=45724 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1774358445.568:2892): pid=45724 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A6A616470686F6A6A706A6178746F6375716D79666D746A67776C6C6F757277203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313737343335383434352E343134373736362D34353530392D3236353430303531323336313633382F416E736962616C6C5A5F646E662E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1774358445.569:2893): pid=45724 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1774358445.570:2894): pid=45724 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=SERVICE_START msg=audit(1774358451.857:2895): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-rd3d4249aa6334861a33e8c87e81779c0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1774358452.033:2896): prog-id=150 op=LOAD
type=BPF msg=audit(1774358452.033:2897): prog-id=127 op=UNLOAD
type=BPF msg=audit(1774358452.033:2898): prog-id=151 op=LOAD
type=BPF msg=audit(1774358452.033:2899): prog-id=152 op=LOAD
type=BPF msg=audit(1774358452.033:2900): prog-id=128 op=UNLOAD
type=BPF msg=audit(1774358452.033:2901): prog-id=129 op=UNLOAD
type=BPF msg=audit(1774358452.035:2902): prog-id=153 op=LOAD
type=BPF msg=audit(1774358452.035:2903): prog-id=154 op=LOAD
type=BPF msg=audit(1774358452.035:2904): prog-id=130 op=UNLOAD
type=BPF msg=audit(1774358452.035:2905): prog-id=131 op=UNLOAD
type=BPF msg=audit(1774358452.036:2906): prog-id=155 op=LOAD
type=BPF msg=audit(1774358452.036:2907): prog-id=156 op=LOAD
type=BPF msg=audit(1774358452.036:2908): prog-id=139 op=UNLOAD
type=BPF msg=audit(1774358452.036:2909): prog-id=140 op=UNLOAD
type=BPF msg=audit(1774358452.038:2910): prog-id=157 op=LOAD
type=BPF msg=audit(1774358452.038:2911): prog-id=141 op=UNLOAD
type=BPF msg=audit(1774358452.040:2912): prog-id=158 op=LOAD
type=BPF msg=audit(1774358452.040:2913): prog-id=146 op=UNLOAD
type=BPF msg=audit(1774358452.040:2914): prog-id=159 op=LOAD
type=BPF msg=audit(1774358452.040:2915): prog-id=160 op=LOAD
type=BPF msg=audit(1774358452.040:2916): prog-id=147 op=UNLOAD
type=BPF msg=audit(1774358452.040:2917): prog-id=148 op=UNLOAD
type=BPF msg=audit(1774358452.041:2918): prog-id=161 op=LOAD
type=BPF msg=audit(1774358452.041:2919): prog-id=149 op=UNLOAD
type=SERVICE_START msg=audit(1774358452.076:2920): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r938241b7b5394fb0baef0c840abfefd6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SOFTWARE_UPDATE msg=audit(1774358452.081:2921): pid=45726 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="iptables-libs-1.8.10-11.el9_5.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358452.081:2922): pid=45726 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="iptables-legacy-libs-1.8.10-11.1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358452.081:2923): pid=45726 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="socat-1.7.4.1-8.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358452.081:2924): pid=45726 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libnetfilter_queue-1.0.5-1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358452.081:2925): pid=45726 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libnetfilter_cttimeout-1.0.0-19.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358452.081:2926): pid=45726 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libnetfilter_cthelper-1.0.0-22.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358452.081:2927): pid=45726 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="conntrack-tools-1.4.7-4.el9_5.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358452.081:2928): pid=45726 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libnftnl-1.2.6-4.el9_4.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358452.081:2929): pid=45726 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="iptables-nft-1.8.10-11.el9_5.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358452.081:2930): pid=45726 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="kubernetes-cni-1.2.0-0.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358452.081:2931): pid=45726 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="kubelet-1.24.17-0.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358452.081:2932): pid=45726 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="iptables-legacy-1.8.10-11.1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SERVICE_START msg=audit(1774358452.495:2933): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1774358452.495:2934): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1774358452.495:2935): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r938241b7b5394fb0baef0c840abfefd6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1774358452.496:2936): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-rd3d4249aa6334861a33e8c87e81779c0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1774358452.732:2937): pid=45724 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1774358452.732:2938): pid=45724 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358452.734:2939): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358452.734:2940): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358452.744:2941): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358452.744:2942): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358452.745:2943): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=46055 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358452.764:2944): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358452.764:2945): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358452.843:2946): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358452.843:2947): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358452.844:2948): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=46073 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358452.862:2949): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358452.862:2950): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358452.871:2951): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358452.871:2952): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358452.871:2953): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=46090 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358452.892:2954): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358452.892:2955): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358452.905:2956): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358452.905:2957): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358452.905:2958): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=46114 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358452.935:2959): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358452.935:2960): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358452.944:2961): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358452.944:2962): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358452.945:2963): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=46131 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358452.966:2964): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358452.966:2965): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358452.977:2966): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358452.977:2967): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358452.977:2968): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=46149 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1774358453.005:2969): pid=46167 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1774358453.005:2970): pid=46167 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B6777747A776A7176626A6970736365746F71716D747978676C656579696D6C203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313737343335383435322E383633363337342D34353530392D3131313439333834373831353735382F416E736962616C6C5A5F646E662E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1774358453.005:2971): pid=46167 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1774358453.007:2972): pid=46167 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=BPF msg=audit(1774358456.525:2973): prog-id=162 op=LOAD
type=BPF msg=audit(1774358456.525:2974): prog-id=150 op=UNLOAD
type=BPF msg=audit(1774358456.525:2975): prog-id=163 op=LOAD
type=BPF msg=audit(1774358456.525:2976): prog-id=164 op=LOAD
type=BPF msg=audit(1774358456.525:2977): prog-id=151 op=UNLOAD
type=BPF msg=audit(1774358456.525:2978): prog-id=152 op=UNLOAD
type=BPF msg=audit(1774358456.526:2979): prog-id=165 op=LOAD
type=BPF msg=audit(1774358456.526:2980): prog-id=166 op=LOAD
type=BPF msg=audit(1774358456.526:2981): prog-id=153 op=UNLOAD
type=BPF msg=audit(1774358456.526:2982): prog-id=154 op=UNLOAD
type=BPF msg=audit(1774358456.527:2983): prog-id=167 op=LOAD
type=BPF msg=audit(1774358456.527:2984): prog-id=168 op=LOAD
type=BPF msg=audit(1774358456.527:2985): prog-id=155 op=UNLOAD
type=BPF msg=audit(1774358456.527:2986): prog-id=156 op=UNLOAD
type=BPF msg=audit(1774358456.528:2987): prog-id=169 op=LOAD
type=BPF msg=audit(1774358456.528:2988): prog-id=157 op=UNLOAD
type=BPF msg=audit(1774358456.531:2989): prog-id=170 op=LOAD
type=BPF msg=audit(1774358456.531:2990): prog-id=158 op=UNLOAD
type=BPF msg=audit(1774358456.531:2991): prog-id=171 op=LOAD
type=BPF msg=audit(1774358456.531:2992): prog-id=172 op=LOAD
type=BPF msg=audit(1774358456.531:2993): prog-id=159 op=UNLOAD
type=BPF msg=audit(1774358456.531:2994): prog-id=160 op=UNLOAD
type=BPF msg=audit(1774358456.532:2995): prog-id=173 op=LOAD
type=BPF msg=audit(1774358456.532:2996): prog-id=161 op=UNLOAD
type=SOFTWARE_UPDATE msg=audit(1774358456.543:2997): pid=46169 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="cri-tools-1.26.0-0.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1774358456.543:2998): pid=46169 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="kubeadm-1.24.17-0.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-457-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1774358457.170:2999): pid=46167 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1774358457.170:3000): pid=46167 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358457.172:3001): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358457.172:3002): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358457.185:3003): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358457.185:3004): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358457.186:3005): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=46200 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358457.205:3006): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358457.205:3007): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358457.380:3008): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358457.380:3009): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358457.381:3010): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=46219 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358457.398:3011): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358457.398:3012): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358457.407:3013): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358457.407:3014): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358457.408:3015): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=46236 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358457.428:3016): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358457.428:3017): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358457.442:3018): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358457.442:3019): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358457.443:3020): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=46260 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358457.469:3021): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358457.469:3022): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358457.478:3023): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358457.478:3024): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358457.479:3025): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=46277 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358457.497:3026): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358457.497:3027): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358457.506:3028): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358457.506:3029): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358457.507:3030): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=46295 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1774358457.533:3031): pid=46313 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1774358457.534:3032): pid=46313 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D72796E68756A686D66656F6E62666377727967696F68716162676E79736E6A64203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313737343335383435372E343030303633382D34363231372D34353338333338353237383536392F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1774358457.534:3033): pid=46313 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1774358457.536:3034): pid=46313 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_ACCT msg=audit(1774358457.747:3035): pid=46325 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky"
type=USER_CMD msg=audit(1774358457.747:3036): pid=46325 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=6D7620636F6E6669672E746F6D6C202F6574632F636F6E7461696E6572642F636F6E6669672E746F6D6C exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="root" AUID="rocky"
type=CRED_REFR msg=audit(1774358457.747:3037): pid=46325 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1774358457.749:3038): pid=46325 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1774358457.751:3039): pid=46325 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1774358457.751:3040): pid=46325 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky"
type=USER_ACCT msg=audit(1774358457.759:3041): pid=46316 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky"
type=USER_CMD msg=audit(1774358457.759:3042): pid=46316 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=73797374656D63746C207265737461727420636F6E7461696E657264 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="root" AUID="rocky"
type=CRED_REFR msg=audit(1774358457.760:3043): pid=46316 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1774358457.761:3044): pid=46316 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky"
type=SERVICE_STOP msg=audit(1774358457.771:3045): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=containerd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1774358457.833:3046): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=containerd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1774358457.835:3047): pid=46316 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1774358457.835:3048): pid=46316 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1774358457.848:3049): pid=46313 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1774358457.848:3050): pid=46313 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358457.851:3051): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358457.851:3052): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358457.860:3053): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358457.860:3054): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358457.861:3055): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=46356 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358457.879:3056): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358457.879:3057): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358458.174:3058): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358458.174:3059): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358458.174:3060): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=46378 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358458.192:3061): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358458.192:3062): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358458.200:3063): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358458.200:3064): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358458.201:3065): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=46395 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358458.226:3066): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358458.226:3067): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358458.242:3068): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358458.242:3069): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358458.243:3070): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=46419 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358458.269:3071): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358458.269:3072): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358458.278:3073): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358458.278:3074): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358458.279:3075): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=46436 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358458.297:3076): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358458.297:3077): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358458.306:3078): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358458.306:3079): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358458.307:3080): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=46454 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1774358458.333:3081): pid=46472 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1774358458.333:3082): pid=46472 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7862776669616D6C6E7879747864656662776F6C7A6966687173637670637A6F203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313737343335383435382E313933353236332D34363337362D3135383738393138383636383433352F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1774358458.333:3083): pid=46472 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1774358458.334:3084): pid=46472 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358458.516:3085): pid=46472 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1774358458.517:3086): pid=46472 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358458.518:3087): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358458.518:3088): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358458.527:3089): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358458.527:3090): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358458.528:3091): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=46482 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358458.546:3092): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358458.546:3093): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358459.271:3094): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358459.271:3095): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358459.272:3096): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=46510 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358459.290:3097): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358459.290:3098): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358459.299:3099): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358459.299:3100): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358459.300:3101): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=46527 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358459.322:3102): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358459.322:3103): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358459.335:3104): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358459.335:3105): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358459.336:3106): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=46551 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358459.365:3107): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358459.365:3108): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358459.373:3109): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358459.373:3110): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358459.374:3111): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=46568 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358459.393:3112): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358459.393:3113): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358459.402:3114): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358459.402:3115): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358459.403:3116): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=46586 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1774358459.429:3117): pid=46604 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1774358459.429:3118): pid=46604 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D77717967616971756C7066787A71697163666D627375696965617A666D656264203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313737343335383435392E323931363036322D34363530382D3232323735373834343731333034322F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1774358459.429:3119): pid=46604 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1774358459.431:3120): pid=46604 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358459.619:3121): pid=46604 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1774358459.620:3122): pid=46604 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358459.622:3123): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358459.622:3124): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358459.631:3125): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358459.631:3126): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358459.631:3127): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=46639 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358459.649:3128): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358459.649:3129): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358460.045:3130): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358460.045:3131): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358460.046:3132): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=46661 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358460.064:3133): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358460.064:3134): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358460.072:3135): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358460.072:3136): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358460.073:3137): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=46678 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358460.095:3138): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358460.095:3139): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358460.218:3140): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358460.218:3141): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358460.219:3142): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=46702 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358460.245:3143): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358460.246:3144): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358460.255:3145): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358460.255:3146): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358460.256:3147): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=46719 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358460.275:3148): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358460.275:3149): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358460.284:3150): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358460.284:3151): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358460.284:3152): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=46737 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1774358460.310:3153): pid=46755 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1774358460.310:3154): pid=46755 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D757274656B6D76686B6275727566677A696B737978777A68696C666477747475203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313737343335383436302E303635333731382D34363635392D3137303039323431353735333833302F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1774358460.311:3155): pid=46755 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1774358460.312:3156): pid=46755 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358460.443:3157): pid=46755 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1774358460.444:3158): pid=46755 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358460.446:3159): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358460.446:3160): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358460.454:3161): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358460.455:3162): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358460.455:3163): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=46759 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358460.474:3164): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358460.474:3165): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358460.670:3166): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358460.670:3167): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358460.671:3168): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=46779 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358460.689:3169): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358460.689:3170): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358460.698:3171): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358460.698:3172): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358460.700:3173): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=46796 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358460.722:3174): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358460.722:3175): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358460.736:3176): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358460.736:3177): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358460.737:3178): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=46820 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358460.766:3179): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358460.766:3180): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358460.777:3181): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358460.777:3182): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358460.778:3183): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=46837 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358460.797:3184): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358460.797:3185): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358460.805:3186): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358460.805:3187): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358460.806:3188): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=46855 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1774358460.832:3189): pid=46873 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1774358460.832:3190): pid=46873 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D657A72667662646D6E6F7462767162616F716C697462687363786E7167786362203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313737343335383436302E363930303635392D34363737372D33353831363237383935373333392F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1774358460.832:3191): pid=46873 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1774358460.834:3192): pid=46873 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358460.993:3193): pid=46873 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1774358460.993:3194): pid=46873 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358460.995:3195): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358460.995:3196): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358461.004:3197): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358461.004:3198): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358461.005:3199): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=46879 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358461.025:3200): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358461.025:3201): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358461.575:3202): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358461.575:3203): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358461.576:3204): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=46905 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358461.593:3205): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358461.593:3206): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358461.601:3207): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358461.601:3208): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358461.602:3209): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=46922 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358461.623:3210): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358461.623:3211): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358461.635:3212): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358461.635:3213): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358461.636:3214): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=46946 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358461.665:3215): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358461.665:3216): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358461.674:3217): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358461.674:3218): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358461.674:3219): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=46963 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358461.693:3220): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358461.693:3221): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358461.702:3222): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358461.702:3223): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358461.703:3224): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=46981 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1774358461.728:3225): pid=46999 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1774358461.729:3226): pid=46999 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D65646D6F6A697278696968616D6E6B6F656F7A6E6E66787A62626B6D786F6263203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313737343335383436312E353934333936362D34363930332D3237333832353934353736363636392F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1774358461.729:3227): pid=46999 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1774358461.730:3228): pid=46999 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358461.876:3229): pid=46999 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1774358461.876:3230): pid=46999 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358461.878:3231): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358461.879:3232): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358461.887:3233): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358461.887:3234): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358461.888:3235): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=47003 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358461.907:3236): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358461.907:3237): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358462.124:3238): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358462.124:3239): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358462.124:3240): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=47023 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358462.142:3241): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358462.142:3242): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358462.151:3243): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358462.151:3244): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358462.152:3245): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=47040 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358462.173:3246): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358462.173:3247): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358462.187:3248): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358462.187:3249): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358462.187:3250): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=47064 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358462.215:3251): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358462.215:3252): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358462.224:3253): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358462.224:3254): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358462.225:3255): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=47081 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358462.244:3256): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358462.244:3257): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358462.253:3258): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358462.253:3259): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358462.254:3260): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=47099 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1774358462.280:3261): pid=47117 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1774358462.280:3262): pid=47117 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D746F776D677266676663747979676A736D6F766675737A646C6B6172666A786C203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313737343335383436322E313433363633342D34373032312D3231393739343833313230393038372F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1774358462.280:3263): pid=47117 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1774358462.282:3264): pid=47117 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358462.428:3265): pid=47117 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1774358462.429:3266): pid=47117 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358462.431:3267): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358462.431:3268): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358462.440:3269): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358462.440:3270): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358462.441:3271): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=47121 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358462.459:3272): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358462.459:3273): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358462.648:3274): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358462.648:3275): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358462.648:3276): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=47141 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358462.666:3277): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358462.666:3278): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358462.674:3279): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358462.674:3280): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358462.675:3281): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=47158 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358462.695:3282): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358462.695:3283): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358462.917:3284): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358462.917:3285): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358462.918:3286): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=47182 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358462.964:3287): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358462.964:3288): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358462.973:3289): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358462.973:3290): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358462.974:3291): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=47199 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358462.997:3292): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358462.997:3293): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358463.011:3294): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358463.011:3295): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358463.012:3296): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=47217 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1774358463.038:3297): pid=47235 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1774358463.038:3298): pid=47235 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D687478756563726D6C656A6A6D6D696479636F7265746B78667464776C72796F203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313737343335383436322E363637323233352D34373133392D3236383738393732373135353438362F416E736962616C6C5A5F73797374656D642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1774358463.039:3299): pid=47235 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1774358463.040:3300): pid=47235 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=BPF msg=audit(1774358463.390:3301): prog-id=174 op=LOAD
type=BPF msg=audit(1774358463.390:3302): prog-id=162 op=UNLOAD
type=BPF msg=audit(1774358463.390:3303): prog-id=175 op=LOAD
type=BPF msg=audit(1774358463.390:3304): prog-id=176 op=LOAD
type=BPF msg=audit(1774358463.390:3305): prog-id=163 op=UNLOAD
type=BPF msg=audit(1774358463.390:3306): prog-id=164 op=UNLOAD
type=BPF msg=audit(1774358463.391:3307): prog-id=177 op=LOAD
type=BPF msg=audit(1774358463.391:3308): prog-id=178 op=LOAD
type=BPF msg=audit(1774358463.391:3309): prog-id=165 op=UNLOAD
type=BPF msg=audit(1774358463.391:3310): prog-id=166 op=UNLOAD
type=BPF msg=audit(1774358463.392:3311): prog-id=179 op=LOAD
type=BPF msg=audit(1774358463.392:3312): prog-id=180 op=LOAD
type=BPF msg=audit(1774358463.392:3313): prog-id=167 op=UNLOAD
type=BPF msg=audit(1774358463.392:3314): prog-id=168 op=UNLOAD
type=BPF msg=audit(1774358463.393:3315): prog-id=181 op=LOAD
type=BPF msg=audit(1774358463.393:3316): prog-id=169 op=UNLOAD
type=BPF msg=audit(1774358463.396:3317): prog-id=182 op=LOAD
type=BPF msg=audit(1774358463.396:3318): prog-id=170 op=UNLOAD
type=BPF msg=audit(1774358463.396:3319): prog-id=183 op=LOAD
type=BPF msg=audit(1774358463.396:3320): prog-id=184 op=LOAD
type=BPF msg=audit(1774358463.396:3321): prog-id=171 op=UNLOAD
type=BPF msg=audit(1774358463.396:3322): prog-id=172 op=UNLOAD
type=BPF msg=audit(1774358463.396:3323): prog-id=185 op=LOAD
type=BPF msg=audit(1774358463.397:3324): prog-id=173 op=UNLOAD
type=BPF msg=audit(1774358463.552:3325): prog-id=186 op=LOAD
type=BPF msg=audit(1774358463.552:3326): prog-id=174 op=UNLOAD
type=BPF msg=audit(1774358463.552:3327): prog-id=187 op=LOAD
type=BPF msg=audit(1774358463.552:3328): prog-id=188 op=LOAD
type=BPF msg=audit(1774358463.552:3329): prog-id=175 op=UNLOAD
type=BPF msg=audit(1774358463.552:3330): prog-id=176 op=UNLOAD
type=BPF msg=audit(1774358463.553:3331): prog-id=189 op=LOAD
type=BPF msg=audit(1774358463.553:3332): prog-id=190 op=LOAD
type=BPF msg=audit(1774358463.553:3333): prog-id=177 op=UNLOAD
type=BPF msg=audit(1774358463.553:3334): prog-id=178 op=UNLOAD
type=BPF msg=audit(1774358463.554:3335): prog-id=191 op=LOAD
type=BPF msg=audit(1774358463.554:3336): prog-id=192 op=LOAD
type=BPF msg=audit(1774358463.554:3337): prog-id=179 op=UNLOAD
type=BPF msg=audit(1774358463.554:3338): prog-id=180 op=UNLOAD
type=BPF msg=audit(1774358463.555:3339): prog-id=193 op=LOAD
type=BPF msg=audit(1774358463.555:3340): prog-id=181 op=UNLOAD
type=BPF msg=audit(1774358463.558:3341): prog-id=194 op=LOAD
type=BPF msg=audit(1774358463.558:3342): prog-id=182 op=UNLOAD
type=BPF msg=audit(1774358463.558:3343): prog-id=195 op=LOAD
type=BPF msg=audit(1774358463.558:3344): prog-id=196 op=LOAD
type=BPF msg=audit(1774358463.558:3345): prog-id=183 op=UNLOAD
type=BPF msg=audit(1774358463.558:3346): prog-id=184 op=UNLOAD
type=BPF msg=audit(1774358463.558:3347): prog-id=197 op=LOAD
type=BPF msg=audit(1774358463.559:3348): prog-id=185 op=UNLOAD
type=SERVICE_START msg=audit(1774358463.579:3349): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1774358463.598:3350): pid=47235 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1774358463.598:3351): pid=47235 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358463.602:3352): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358463.602:3353): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358463.614:3354): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358463.614:3355): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358463.614:3356): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=47295 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358463.637:3357): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358463.637:3358): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=SERVICE_STOP msg=audit(1774358463.638:3359): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1774358463.850:3360): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358463.850:3361): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358463.851:3362): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=47315 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358463.870:3363): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358463.870:3364): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358463.881:3365): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358463.881:3366): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358463.882:3367): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=47332 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358463.904:3368): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358463.904:3369): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358463.917:3370): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358463.917:3371): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358463.918:3372): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=47356 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358463.945:3373): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358463.945:3374): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358463.954:3375): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358463.954:3376): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358463.955:3377): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=47373 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358463.973:3378): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358463.973:3379): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358463.982:3380): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358463.982:3381): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358463.983:3382): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=47391 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1774358464.011:3383): pid=47409 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1774358464.011:3384): pid=47409 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E7A777A6B6F7963646872786F636B6F636B7577677771657A796674756E7979203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313737343335383436332E383731323438352D34373331332D37323638313439353034313333312F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1774358464.012:3385): pid=47409 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1774358464.014:3386): pid=47409 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=SERVICE_START msg=audit(1774358473.660:3387): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1774358473.660:3388): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1774358473.666:3389): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1774358473.713:3390): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1774358483.910:3391): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1774358483.910:3392): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1774358483.921:3393): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1774358483.966:3394): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1774358494.160:3395): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1774358494.160:3396): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1774358494.169:3397): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1774358494.215:3398): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1774358501.742:3399): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1774358501.742:3400): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1774358501.945:3401): prog-id=198 op=LOAD
type=BPF msg=audit(1774358501.945:3402): prog-id=186 op=UNLOAD
type=BPF msg=audit(1774358501.945:3403): prog-id=199 op=LOAD
type=BPF msg=audit(1774358501.945:3404): prog-id=200 op=LOAD
type=BPF msg=audit(1774358501.945:3405): prog-id=187 op=UNLOAD
type=BPF msg=audit(1774358501.945:3406): prog-id=188 op=UNLOAD
type=BPF msg=audit(1774358501.946:3407): prog-id=201 op=LOAD
type=BPF msg=audit(1774358501.946:3408): prog-id=202 op=LOAD
type=BPF msg=audit(1774358501.946:3409): prog-id=189 op=UNLOAD
type=BPF msg=audit(1774358501.946:3410): prog-id=190 op=UNLOAD
type=BPF msg=audit(1774358501.947:3411): prog-id=203 op=LOAD
type=BPF msg=audit(1774358501.947:3412): prog-id=204 op=LOAD
type=BPF msg=audit(1774358501.947:3413): prog-id=191 op=UNLOAD
type=BPF msg=audit(1774358501.947:3414): prog-id=192 op=UNLOAD
type=BPF msg=audit(1774358501.948:3415): prog-id=205 op=LOAD
type=BPF msg=audit(1774358501.948:3416): prog-id=193 op=UNLOAD
type=BPF msg=audit(1774358501.951:3417): prog-id=206 op=LOAD
type=BPF msg=audit(1774358501.951:3418): prog-id=194 op=UNLOAD
type=BPF msg=audit(1774358501.951:3419): prog-id=207 op=LOAD
type=BPF msg=audit(1774358501.951:3420): prog-id=208 op=LOAD
type=BPF msg=audit(1774358501.951:3421): prog-id=195 op=UNLOAD
type=BPF msg=audit(1774358501.951:3422): prog-id=196 op=UNLOAD
type=BPF msg=audit(1774358501.952:3423): prog-id=209 op=LOAD
type=BPF msg=audit(1774358501.952:3424): prog-id=197 op=UNLOAD
type=SERVICE_START msg=audit(1774358501.979:3425): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=NETFILTER_CFG msg=audit(1774358502.416:3426): table=nat family=2 entries=11 op=xt_replace pid=47698 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables"
type=SYSCALL msg=audit(1774358502.416:3426): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=5653df89b320 items=0 ppid=47680 pid=47698 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358502.416:3426): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D44524F50002D74006E6174
type=NETFILTER_CFG msg=audit(1774358502.425:3427): table=nat family=2 entries=13 op=xt_replace pid=47701 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables"
type=SYSCALL msg=audit(1774358502.425:3427): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55f30e35f160 items=0 ppid=47680 pid=47701 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358502.425:3427): proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D44524F50002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303038303030
type=NETFILTER_CFG msg=audit(1774358502.426:3428): table=filter family=2 entries=23 op=xt_replace pid=47702 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables"
type=SYSCALL msg=audit(1774358502.426:3428): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55abfe77e290 items=0 ppid=47680 pid=47702 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358502.426:3428): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572
type=NETFILTER_CFG msg=audit(1774358502.433:3429): table=filter family=2 entries=25 op=xt_replace pid=47705 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables"
type=SYSCALL msg=audit(1774358502.433:3429): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=5600df09e1d0 items=0 ppid=47680 pid=47705 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358502.433:3429): proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206669726577616C6C20666F722064726F7070696E67206D61726B6564207061636B657473002D6D006D61726B
type=NETFILTER_CFG msg=audit(1774358502.436:3430): table=filter family=2 entries=26 op=xt_replace pid=47709 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables"
type=SYSCALL msg=audit(1774358502.436:3430): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55c6ef7bc950 items=0 ppid=47680 pid=47709 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358502.436:3430): proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38
type=NETFILTER_CFG msg=audit(1774358502.438:3431): table=filter family=2 entries=27 op=xt_replace pid=47711 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables"
type=SYSCALL msg=audit(1774358502.438:3431): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55a73f0fb490 items=0 ppid=47680 pid=47711 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358502.438:3431): proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C
type=NETFILTER_CFG msg=audit(1774358502.440:3432): table=filter family=2 entries=28 op=xt_replace pid=47713 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables"
type=SYSCALL msg=audit(1774358502.440:3432): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55a2ba670600 items=0 ppid=47680 pid=47713 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358502.440:3432): proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C
type=NETFILTER_CFG msg=audit(1774358502.441:3433): table=nat family=2 entries=14 op=xt_replace pid=47714 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables"
type=SYSCALL msg=audit(1774358502.441:3433): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=555b9384e670 items=0 ppid=47680 pid=47714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358502.441:3433): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D4D415351002D74006E6174
type=NETFILTER_CFG msg=audit(1774358502.442:3434): table=nat family=2 entries=16 op=xt_replace pid=47715 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables"
type=SYSCALL msg=audit(1774358502.442:3434): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55ce1203d840 items=0 ppid=47680 pid=47715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358502.442:3434): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174
type=NETFILTER_CFG msg=audit(1774358502.445:3435): table=nat family=2 entries=18 op=xt_replace pid=47717 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables"
type=SYSCALL msg=audit(1774358502.445:3435): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55ffb89c3690 items=0 ppid=47680 pid=47717 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358502.445:3435): proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D4D415351002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303034303030
type=NETFILTER_CFG msg=audit(1774358502.447:3436): table=nat family=2 entries=19 op=xt_replace pid=47719 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables"
type=SYSCALL msg=audit(1774358502.447:3436): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=556c354c61e0 items=0 ppid=47680 pid=47719 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358502.447:3436): proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47
type=NETFILTER_CFG msg=audit(1774358502.449:3437): table=nat family=2 entries=20 op=xt_replace pid=47721 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables"
type=SYSCALL msg=audit(1774358502.449:3437): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=557c34be32b0 items=0 ppid=47680 pid=47721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358502.449:3437): proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D006D61726B0000002D2D6D61726B00307830303030343030302F30783030303034303030002D6A0052455455524E
type=NETFILTER_CFG msg=audit(1774358502.451:3438): table=nat family=2 entries=21 op=xt_replace pid=47723 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables"
type=SYSCALL msg=audit(1774358502.451:3438): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=558aafd1cd90 items=0 ppid=47680 pid=47723 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358502.451:3438): proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6A004D41524B002D2D786F722D6D61726B0030783030303034303030
type=NETFILTER_CFG msg=audit(1774358502.453:3439): table=nat family=2 entries=22 op=xt_replace pid=47725 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables"
type=SYSCALL msg=audit(1774358502.453:3439): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=561e2a4a69a0 items=0 ppid=47680 pid=47725 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358502.453:3439): proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732073657276696365207472616666696320726571756972696E6720534E4154002D6A004D415351554552414445
type=NETFILTER_CFG msg=audit(1774358502.457:3440): table=mangle family=2 entries=0 op=xt_register pid=47727 subj=system_u:system_r:kmod_t:s0 comm="modprobe"
type=SYSCALL msg=audit(1774358502.457:3440): arch=c000003e syscall=175 success=yes exit=0 a0=563e5fcfdca0 a1=36ce a2=563e5f7c0962 a3=5 items=0 ppid=886 pid=47727 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="modprobe" exe="/usr/bin/kmod" subj=system_u:system_r:kmod_t:s0 key=(null)ARCH=x86_64 SYSCALL=init_module AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358502.457:3440): proctitle=2F7573722F7362696E2F6D6F6470726F6265002D71002D2D0069707461626C655F6D616E676C65
type=NETFILTER_CFG msg=audit(1774358502.458:3441): table=mangle family=2 entries=6 op=xt_replace pid=47726 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables"
type=SYSCALL msg=audit(1774358502.458:3441): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=559feb126bc0 items=0 ppid=47680 pid=47726 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358502.458:3441): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65
type=NETFILTER_CFG msg=audit(1774358502.471:3442): table=nat family=10 entries=0 op=xt_register pid=47733 subj=system_u:system_r:kmod_t:s0 comm="modprobe"
type=SYSCALL msg=audit(1774358502.471:3442): arch=c000003e syscall=175 success=yes exit=0 a0=5648c281f490 a1=3c26 a2=5648c228b962 a3=5 items=0 ppid=886 pid=47733 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="modprobe" exe="/usr/bin/kmod" subj=system_u:system_r:kmod_t:s0 key=(null)ARCH=x86_64 SYSCALL=init_module AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358502.471:3442): proctitle=2F7573722F7362696E2F6D6F6470726F6265002D71002D2D006970367461626C655F6E6174
type=NETFILTER_CFG msg=audit(1774358502.472:3443): table=nat family=10 entries=5 op=xt_replace pid=47728 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="ip6tables"
type=SYSCALL msg=audit(1774358502.472:3443): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=5573a824ebf0 items=0 ppid=47680 pid=47728 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358502.472:3443): proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D44524F50002D74006E6174
type=NETFILTER_CFG msg=audit(1774358502.472:3444): table=mangle family=2 entries=8 op=xt_replace pid=47729 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables"
type=SYSCALL msg=audit(1774358502.472:3444): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55853886fd90 items=0 ppid=47680 pid=47729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358502.472:3444): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65
type=NETFILTER_CFG msg=audit(1774358502.473:3445): table=nat family=2 entries=23 op=xt_replace pid=47735 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables"
type=SYSCALL msg=audit(1774358502.473:3445): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=559deb770670 items=0 ppid=47680 pid=47735 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358502.473:3445): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174
type=NETFILTER_CFG msg=audit(1774358502.475:3446): table=filter family=2 entries=29 op=xt_replace pid=47736 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables"
type=SYSCALL msg=audit(1774358502.475:3446): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55d8a40d80c0 items=0 ppid=47680 pid=47736 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358502.475:3446): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572
type=NETFILTER_CFG msg=audit(1774358502.475:3447): table=nat family=10 entries=7 op=xt_replace pid=47737 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="ip6tables"
type=SYSCALL msg=audit(1774358502.475:3447): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=5630c28dbac0 items=0 ppid=47680 pid=47737 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358502.475:3447): proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D44524F50002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303038303030
type=NETFILTER_CFG msg=audit(1774358502.478:3448): table=filter family=10 entries=0 op=xt_register pid=47739 subj=system_u:system_r:kmod_t:s0 comm="modprobe"
type=SYSCALL msg=audit(1774358502.478:3448): arch=c000003e syscall=175 success=yes exit=0 a0=55a919e77ca0 a1=3616 a2=55a91950a962 a3=5 items=0 ppid=886 pid=47739 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="modprobe" exe="/usr/bin/kmod" subj=system_u:system_r:kmod_t:s0 key=(null)ARCH=x86_64 SYSCALL=init_module AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358502.478:3448): proctitle=2F7573722F7362696E2F6D6F6470726F6265002D71002D2D006970367461626C655F66696C746572
type=NETFILTER_CFG msg=audit(1774358502.479:3449): table=filter family=10 entries=4 op=xt_replace pid=47738 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="ip6tables"
type=SYSCALL msg=audit(1774358502.479:3449): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55befd483a90 items=0 ppid=47680 pid=47738 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358502.479:3449): proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572
type=NETFILTER_CFG msg=audit(1774358502.481:3450): table=filter family=10 entries=6 op=xt_replace pid=47741 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="ip6tables"
type=SYSCALL msg=audit(1774358502.481:3450): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55a4a5826ad0 items=0 ppid=47680 pid=47741 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358502.481:3450): proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206669726577616C6C20666F722064726F7070696E67206D61726B6564207061636B657473002D6D006D61726B
type=NETFILTER_CFG msg=audit(1774358502.483:3451): table=filter family=10 entries=7 op=xt_replace pid=47744 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="ip6tables"
type=SYSCALL msg=audit(1774358502.483:3451): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=558e67138860 items=0 ppid=47680 pid=47744 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358502.483:3451): proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C
type=NETFILTER_CFG msg=audit(1774358502.485:3452): table=filter family=10 entries=8 op=xt_replace pid=47746 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="ip6tables"
type=SYSCALL msg=audit(1774358502.485:3452): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55cc4e82ea50 items=0 ppid=47680 pid=47746 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358502.485:3452): proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C
type=NETFILTER_CFG msg=audit(1774358502.486:3453): table=nat family=10 entries=8 op=xt_replace pid=47747 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="ip6tables"
type=SYSCALL msg=audit(1774358502.486:3453): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55f603372020 items=0 ppid=47680 pid=47747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358502.486:3453): proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D4D415351002D74006E6174
type=NETFILTER_CFG msg=audit(1774358502.487:3454): table=nat family=10 entries=10 op=xt_replace pid=47748 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="ip6tables"
type=SYSCALL msg=audit(1774358502.487:3454): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=563815112270 items=0 ppid=47680 pid=47748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358502.487:3454): proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174
type=NETFILTER_CFG msg=audit(1774358502.489:3455): table=nat family=10 entries=12 op=xt_replace pid=47750 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="ip6tables"
type=SYSCALL msg=audit(1774358502.489:3455): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=5653799a6140 items=0 ppid=47680 pid=47750 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358502.489:3455): proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D4D415351002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303034303030
type=NETFILTER_CFG msg=audit(1774358502.491:3456): table=nat family=10 entries=13 op=xt_replace pid=47752 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="ip6tables"
type=SYSCALL msg=audit(1774358502.491:3456): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=5621e2eacd50 items=0 ppid=47680 pid=47752 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358502.491:3456): proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47
type=NETFILTER_CFG msg=audit(1774358502.493:3457): table=nat family=10 entries=14 op=xt_replace pid=47754 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="ip6tables"
type=SYSCALL msg=audit(1774358502.493:3457): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55ff6be32e90 items=0 ppid=47680 pid=47754 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358502.493:3457): proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D006D61726B0000002D2D6D61726B00307830303030343030302F30783030303034303030002D6A0052455455524E
type=NETFILTER_CFG msg=audit(1774358502.495:3458): table=nat family=10 entries=15 op=xt_replace pid=47756 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="ip6tables"
type=SYSCALL msg=audit(1774358502.495:3458): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=5584c3b819b0 items=0 ppid=47680 pid=47756 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358502.495:3458): proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6A004D41524B002D2D786F722D6D61726B0030783030303034303030
type=NETFILTER_CFG msg=audit(1774358502.497:3459): table=nat family=10 entries=16 op=xt_replace pid=47758 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="ip6tables"
type=SYSCALL msg=audit(1774358502.497:3459): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=562ac0f9c6c0 items=0 ppid=47680 pid=47758 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358502.497:3459): proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732073657276696365207472616666696320726571756972696E6720534E4154002D6A004D415351554552414445
type=NETFILTER_CFG msg=audit(1774358502.501:3460): table=mangle family=10 entries=0 op=xt_register pid=47760 subj=system_u:system_r:kmod_t:s0 comm="modprobe"
type=SYSCALL msg=audit(1774358502.501:3460): arch=c000003e syscall=175 success=yes exit=0 a0=55a30c3e0ca0 a1=34ae a2=55a30b7e2962 a3=5 items=0 ppid=886 pid=47760 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="modprobe" exe="/usr/bin/kmod" subj=system_u:system_r:kmod_t:s0 key=(null)ARCH=x86_64 SYSCALL=init_module AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358502.501:3460): proctitle=2F7573722F7362696E2F6D6F6470726F6265002D71002D2D006970367461626C655F6D616E676C65
type=NETFILTER_CFG msg=audit(1774358502.502:3461): table=mangle family=10 entries=6 op=xt_replace pid=47759 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="ip6tables"
type=SYSCALL msg=audit(1774358502.502:3461): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=5644296add50 items=0 ppid=47680 pid=47759 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358502.502:3461): proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65
type=NETFILTER_CFG msg=audit(1774358502.503:3462): table=mangle family=10 entries=8 op=xt_replace pid=47761 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="ip6tables"
type=SYSCALL msg=audit(1774358502.503:3462): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=5606b0357f90 items=0 ppid=47680 pid=47761 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358502.503:3462): proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65
type=NETFILTER_CFG msg=audit(1774358502.504:3463): table=nat family=10 entries=17 op=xt_replace pid=47762 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="ip6tables"
type=SYSCALL msg=audit(1774358502.504:3463): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=56138e527380 items=0 ppid=47680 pid=47762 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358502.504:3463): proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174
type=NETFILTER_CFG msg=audit(1774358502.505:3464): table=filter family=10 entries=9 op=xt_replace pid=47763 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="ip6tables"
type=SYSCALL msg=audit(1774358502.505:3464): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=5584374cf540 items=0 ppid=47680 pid=47763 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358502.505:3464): proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572
type=BPF msg=audit(1774358506.432:3465): prog-id=210 op=LOAD
type=BPF msg=audit(1774358506.433:3466): prog-id=211 op=LOAD
type=SYSCALL msg=audit(1774358506.433:3466): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00015c238 a2=98 a3=0 items=0 ppid=47777 pid=47789 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358506.433:3466): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6562353634333634346337623632623231633566373535326231353839
type=BPF msg=audit(1774358506.434:3467): prog-id=211 op=UNLOAD
type=SYSCALL msg=audit(1774358506.434:3467): arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=47777 pid=47789 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=close AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358506.434:3467): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6562353634333634346337623632623231633566373535326231353839
type=BPF msg=audit(1774358506.434:3468): prog-id=212 op=LOAD
type=SYSCALL msg=audit(1774358506.434:3468): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00015c488 a2=98 a3=0 items=0 ppid=47777 pid=47789 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358506.434:3468): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6562353634333634346337623632623231633566373535326231353839
type=BPF msg=audit(1774358506.435:3469): prog-id=213 op=LOAD
type=SYSCALL msg=audit(1774358506.435:3469): arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=c00015c218 a2=98 a3=0 items=0 ppid=47777 pid=47789 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358506.435:3469): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6562353634333634346337623632623231633566373535326231353839
type=BPF msg=audit(1774358506.435:3470): prog-id=213 op=UNLOAD
type=SYSCALL msg=audit(1774358506.435:3470): arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=47777 pid=47789 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=close AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358506.435:3470): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6562353634333634346337623632623231633566373535326231353839
type=BPF msg=audit(1774358506.435:3471): prog-id=212 op=UNLOAD
type=SYSCALL msg=audit(1774358506.435:3471): arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=47777 pid=47789 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=close AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358506.435:3471): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6562353634333634346337623632623231633566373535326231353839
type=BPF msg=audit(1774358506.435:3472): prog-id=214 op=LOAD
type=SYSCALL msg=audit(1774358506.435:3472): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00015c6e8 a2=98 a3=0 items=0 ppid=47777 pid=47789 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358506.435:3472): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6562353634333634346337623632623231633566373535326231353839
type=BPF msg=audit(1774358506.438:3473): prog-id=215 op=LOAD
type=BPF msg=audit(1774358506.439:3474): prog-id=216 op=LOAD
type=SYSCALL msg=audit(1774358506.439:3474): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001c4238 a2=98 a3=0 items=0 ppid=47819 pid=47846 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358506.439:3474): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3366303332383231643136383165393436666337653930363635306431
type=BPF msg=audit(1774358506.439:3475): prog-id=216 op=UNLOAD
type=SYSCALL msg=audit(1774358506.439:3475): arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=47819 pid=47846 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=close AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358506.439:3475): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3366303332383231643136383165393436666337653930363635306431
type=BPF msg=audit(1774358506.439:3476): prog-id=217 op=LOAD
type=SYSCALL msg=audit(1774358506.439:3476): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001c4488 a2=98 a3=0 items=0 ppid=47819 pid=47846 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358506.439:3476): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3366303332383231643136383165393436666337653930363635306431
type=BPF msg=audit(1774358506.439:3477): prog-id=218 op=LOAD
type=SYSCALL msg=audit(1774358506.439:3477): arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=c0001c4218 a2=98 a3=0 items=0 ppid=47819 pid=47846 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358506.439:3477): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3366303332383231643136383165393436666337653930363635306431
type=BPF msg=audit(1774358506.439:3478): prog-id=218 op=UNLOAD
type=SYSCALL msg=audit(1774358506.439:3478): arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=47819 pid=47846 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=close AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358506.439:3478): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3366303332383231643136383165393436666337653930363635306431
type=BPF msg=audit(1774358506.439:3479): prog-id=217 op=UNLOAD
type=SYSCALL msg=audit(1774358506.439:3479): arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=47819 pid=47846 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=close AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358506.439:3479): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3366303332383231643136383165393436666337653930363635306431
type=BPF msg=audit(1774358506.439:3480): prog-id=219 op=LOAD
type=SYSCALL msg=audit(1774358506.439:3480): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001c46e8 a2=98 a3=0 items=0 ppid=47819 pid=47846 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358506.439:3480): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3366303332383231643136383165393436666337653930363635306431
type=BPF msg=audit(1774358506.447:3481): prog-id=220 op=LOAD
type=BPF msg=audit(1774358506.448:3482): prog-id=221 op=LOAD
type=SYSCALL msg=audit(1774358506.448:3482): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00019e238 a2=98 a3=0 items=0 ppid=47817 pid=47838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358506.448:3482): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6463333938303630386338303162366138346537376135613432386664
type=BPF msg=audit(1774358506.448:3483): prog-id=221 op=UNLOAD
type=SYSCALL msg=audit(1774358506.448:3483): arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=47817 pid=47838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=close AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358506.448:3483): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6463333938303630386338303162366138346537376135613432386664
type=BPF msg=audit(1774358506.448:3484): prog-id=222 op=LOAD
type=SYSCALL msg=audit(1774358506.448:3484): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00019e488 a2=98 a3=0 items=0 ppid=47817 pid=47838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358506.448:3484): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6463333938303630386338303162366138346537376135613432386664
type=BPF msg=audit(1774358506.448:3485): prog-id=223 op=LOAD
type=SYSCALL msg=audit(1774358506.448:3485): arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=c00019e218 a2=98 a3=0 items=0 ppid=47817 pid=47838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358506.448:3485): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6463333938303630386338303162366138346537376135613432386664
type=BPF msg=audit(1774358506.448:3486): prog-id=223 op=UNLOAD
type=SYSCALL msg=audit(1774358506.448:3486): arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=47817 pid=47838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=close AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358506.448:3486): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6463333938303630386338303162366138346537376135613432386664
type=BPF msg=audit(1774358506.448:3487): prog-id=222 op=UNLOAD
type=SYSCALL msg=audit(1774358506.448:3487): arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=47817 pid=47838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=close AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358506.448:3487): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6463333938303630386338303162366138346537376135613432386664
type=BPF msg=audit(1774358506.448:3488): prog-id=224 op=LOAD
type=SYSCALL msg=audit(1774358506.448:3488): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00019e6e8 a2=98 a3=0 items=0 ppid=47817 pid=47838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358506.448:3488): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6463333938303630386338303162366138346537376135613432386664
type=BPF msg=audit(1774358506.454:3489): prog-id=225 op=LOAD
type=BPF msg=audit(1774358506.455:3490): prog-id=226 op=LOAD
type=SYSCALL msg=audit(1774358506.455:3490): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00015c238 a2=98 a3=0 items=0 ppid=47852 pid=47887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358506.455:3490): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3737376565343237623366353034653963303139343064303266633437
type=BPF msg=audit(1774358506.455:3491): prog-id=226 op=UNLOAD
type=SYSCALL msg=audit(1774358506.455:3491): arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=47852 pid=47887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=close AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358506.455:3491): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3737376565343237623366353034653963303139343064303266633437
type=BPF msg=audit(1774358506.455:3492): prog-id=227 op=LOAD
type=SYSCALL msg=audit(1774358506.455:3492): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00015c488 a2=98 a3=0 items=0 ppid=47852 pid=47887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358506.455:3492): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3737376565343237623366353034653963303139343064303266633437
type=BPF msg=audit(1774358506.455:3493): prog-id=228 op=LOAD
type=SYSCALL msg=audit(1774358506.455:3493): arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=c00015c218 a2=98 a3=0 items=0 ppid=47852 pid=47887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358506.455:3493): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3737376565343237623366353034653963303139343064303266633437
type=BPF msg=audit(1774358506.455:3494): prog-id=228 op=UNLOAD
type=SYSCALL msg=audit(1774358506.455:3494): arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=47852 pid=47887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=close AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358506.455:3494): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3737376565343237623366353034653963303139343064303266633437
type=BPF msg=audit(1774358506.455:3495): prog-id=227 op=UNLOAD
type=SYSCALL msg=audit(1774358506.455:3495): arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=47852 pid=47887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=close AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358506.455:3495): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3737376565343237623366353034653963303139343064303266633437
type=BPF msg=audit(1774358506.455:3496): prog-id=229 op=LOAD
type=SYSCALL msg=audit(1774358506.455:3496): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00015c6e8 a2=98 a3=0 items=0 ppid=47852 pid=47887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358506.455:3496): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3737376565343237623366353034653963303139343064303266633437
type=BPF msg=audit(1774358506.578:3497): prog-id=230 op=LOAD
type=BPF msg=audit(1774358506.578:3498): prog-id=231 op=LOAD
type=SYSCALL msg=audit(1774358506.578:3498): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c0001a6238 a2=98 a3=0 items=0 ppid=47819 pid=47956 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358506.578:3498): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6136396238333332613762313336636264356431613433643666306534
type=BPF msg=audit(1774358506.578:3499): prog-id=231 op=UNLOAD
type=SYSCALL msg=audit(1774358506.578:3499): arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=47819 pid=47956 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=close AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358506.578:3499): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6136396238333332613762313336636264356431613433643666306534
type=BPF msg=audit(1774358506.578:3500): prog-id=232 op=LOAD
type=SYSCALL msg=audit(1774358506.578:3500): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c0001a6488 a2=98 a3=0 items=0 ppid=47819 pid=47956 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358506.578:3500): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6136396238333332613762313336636264356431613433643666306534
type=BPF msg=audit(1774358506.578:3501): prog-id=233 op=LOAD
type=SYSCALL msg=audit(1774358506.578:3501): arch=c000003e syscall=321 success=yes exit=22 a0=5 a1=c0001a6218 a2=98 a3=0 items=0 ppid=47819 pid=47956 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358506.578:3501): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6136396238333332613762313336636264356431613433643666306534
type=BPF msg=audit(1774358506.578:3502): prog-id=233 op=UNLOAD
type=SYSCALL msg=audit(1774358506.578:3502): arch=c000003e syscall=3 success=yes exit=0 a0=16 a1=0 a2=0 a3=0 items=0 ppid=47819 pid=47956 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=close AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358506.578:3502): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6136396238333332613762313336636264356431613433643666306534
type=BPF msg=audit(1774358506.578:3503): prog-id=232 op=UNLOAD
type=SYSCALL msg=audit(1774358506.578:3503): arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=47819 pid=47956 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=close AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358506.578:3503): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6136396238333332613762313336636264356431613433643666306534
type=BPF msg=audit(1774358506.578:3504): prog-id=234 op=LOAD
type=SYSCALL msg=audit(1774358506.578:3504): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c0001a66e8 a2=98 a3=0 items=0 ppid=47819 pid=47956 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358506.578:3504): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6136396238333332613762313336636264356431613433643666306534
type=BPF msg=audit(1774358506.582:3505): prog-id=235 op=LOAD
type=BPF msg=audit(1774358506.587:3506): prog-id=236 op=LOAD
type=SYSCALL msg=audit(1774358506.587:3506): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c0001c4238 a2=98 a3=0 items=0 ppid=47777 pid=47966 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358506.587:3506): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3534316338623732356637623138373865663133643138313534333639
type=BPF msg=audit(1774358506.587:3507): prog-id=236 op=UNLOAD
type=SYSCALL msg=audit(1774358506.587:3507): arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=47777 pid=47966 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=close AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358506.587:3507): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3534316338623732356637623138373865663133643138313534333639
type=BPF msg=audit(1774358506.587:3508): prog-id=237 op=LOAD
type=SYSCALL msg=audit(1774358506.587:3508): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c0001c4488 a2=98 a3=0 items=0 ppid=47777 pid=47966 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358506.587:3508): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3534316338623732356637623138373865663133643138313534333639
type=BPF msg=audit(1774358506.587:3509): prog-id=238 op=LOAD
type=SYSCALL msg=audit(1774358506.587:3509): arch=c000003e syscall=321 success=yes exit=22 a0=5 a1=c0001c4218 a2=98 a3=0 items=0 ppid=47777 pid=47966 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358506.587:3509): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3534316338623732356637623138373865663133643138313534333639
type=BPF msg=audit(1774358506.587:3510): prog-id=238 op=UNLOAD
type=SYSCALL msg=audit(1774358506.587:3510): arch=c000003e syscall=3 success=yes exit=0 a0=16 a1=0 a2=0 a3=0 items=0 ppid=47777 pid=47966 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=close AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358506.587:3510): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3534316338623732356637623138373865663133643138313534333639
type=BPF msg=audit(1774358506.587:3511): prog-id=237 op=UNLOAD
type=SYSCALL msg=audit(1774358506.587:3511): arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=47777 pid=47966 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=close AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358506.587:3511): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3534316338623732356637623138373865663133643138313534333639
type=BPF msg=audit(1774358506.587:3512): prog-id=239 op=LOAD
type=SYSCALL msg=audit(1774358506.587:3512): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c0001c46e8 a2=98 a3=0 items=0 ppid=47777 pid=47966 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358506.587:3512): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3534316338623732356637623138373865663133643138313534333639
type=BPF msg=audit(1774358506.635:3513): prog-id=240 op=LOAD
type=BPF msg=audit(1774358506.636:3514): prog-id=241 op=LOAD
type=SYSCALL msg=audit(1774358506.636:3514): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c00015c238 a2=98 a3=0 items=0 ppid=47852 pid=47988 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358506.636:3514): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3839353539666630626164336561366465626634396438663239376330
type=BPF msg=audit(1774358506.636:3515): prog-id=241 op=UNLOAD
type=SYSCALL msg=audit(1774358506.636:3515): arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=47852 pid=47988 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=close AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358506.636:3515): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3839353539666630626164336561366465626634396438663239376330
type=BPF msg=audit(1774358506.636:3516): prog-id=242 op=LOAD
type=SYSCALL msg=audit(1774358506.636:3516): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c00015c488 a2=98 a3=0 items=0 ppid=47852 pid=47988 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358506.636:3516): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3839353539666630626164336561366465626634396438663239376330
type=BPF msg=audit(1774358506.636:3517): prog-id=243 op=LOAD
type=SYSCALL msg=audit(1774358506.636:3517): arch=c000003e syscall=321 success=yes exit=22 a0=5 a1=c00015c218 a2=98 a3=0 items=0 ppid=47852 pid=47988 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358506.636:3517): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3839353539666630626164336561366465626634396438663239376330
type=BPF msg=audit(1774358506.637:3518): prog-id=243 op=UNLOAD
type=SYSCALL msg=audit(1774358506.637:3518): arch=c000003e syscall=3 success=yes exit=0 a0=16 a1=0 a2=0 a3=0 items=0 ppid=47852 pid=47988 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=close AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358506.637:3518): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3839353539666630626164336561366465626634396438663239376330
type=BPF msg=audit(1774358506.637:3519): prog-id=242 op=UNLOAD
type=SYSCALL msg=audit(1774358506.637:3519): arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=47852 pid=47988 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=close AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358506.637:3519): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3839353539666630626164336561366465626634396438663239376330
type=BPF msg=audit(1774358506.637:3520): prog-id=244 op=LOAD
type=SYSCALL msg=audit(1774358506.637:3520): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c00015c6e8 a2=98 a3=0 items=0 ppid=47852 pid=47988 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358506.637:3520): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3839353539666630626164336561366465626634396438663239376330
type=BPF msg=audit(1774358506.642:3521): prog-id=245 op=LOAD
type=BPF msg=audit(1774358506.642:3522): prog-id=246 op=LOAD
type=SYSCALL msg=audit(1774358506.642:3522): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c0001c4238 a2=98 a3=0 items=0 ppid=47817 pid=47977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358506.642:3522): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3433386530346439333430653231343539326364643863626136323036
type=BPF msg=audit(1774358506.642:3523): prog-id=246 op=UNLOAD
type=SYSCALL msg=audit(1774358506.642:3523): arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=47817 pid=47977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=close AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358506.642:3523): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3433386530346439333430653231343539326364643863626136323036
type=BPF msg=audit(1774358506.642:3524): prog-id=247 op=LOAD
type=SYSCALL msg=audit(1774358506.642:3524): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c0001c4488 a2=98 a3=0 items=0 ppid=47817 pid=47977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358506.642:3524): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3433386530346439333430653231343539326364643863626136323036
type=BPF msg=audit(1774358506.642:3525): prog-id=248 op=LOAD
type=SYSCALL msg=audit(1774358506.642:3525): arch=c000003e syscall=321 success=yes exit=22 a0=5 a1=c0001c4218 a2=98 a3=0 items=0 ppid=47817 pid=47977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358506.642:3525): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3433386530346439333430653231343539326364643863626136323036
type=BPF msg=audit(1774358506.642:3526): prog-id=248 op=UNLOAD
type=SYSCALL msg=audit(1774358506.642:3526): arch=c000003e syscall=3 success=yes exit=0 a0=16 a1=0 a2=0 a3=0 items=0 ppid=47817 pid=47977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=close AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358506.642:3526): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3433386530346439333430653231343539326364643863626136323036
type=BPF msg=audit(1774358506.642:3527): prog-id=247 op=UNLOAD
type=SYSCALL msg=audit(1774358506.642:3527): arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=47817 pid=47977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=close AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358506.642:3527): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3433386530346439333430653231343539326364643863626136323036
type=BPF msg=audit(1774358506.642:3528): prog-id=249 op=LOAD
type=SYSCALL msg=audit(1774358506.642:3528): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c0001c46e8 a2=98 a3=0 items=0 ppid=47817 pid=47977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358506.642:3528): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3433386530346439333430653231343539326364643863626136323036
type=BPF msg=audit(1774358512.241:3529): prog-id=250 op=LOAD
type=BPF msg=audit(1774358512.241:3530): prog-id=225 op=UNLOAD
type=BPF msg=audit(1774358512.242:3531): prog-id=251 op=LOAD
type=BPF msg=audit(1774358512.242:3532): prog-id=230 op=UNLOAD
type=BPF msg=audit(1774358512.243:3533): prog-id=252 op=LOAD
type=BPF msg=audit(1774358512.243:3534): prog-id=198 op=UNLOAD
type=BPF msg=audit(1774358512.243:3535): prog-id=253 op=LOAD
type=BPF msg=audit(1774358512.243:3536): prog-id=254 op=LOAD
type=BPF msg=audit(1774358512.243:3537): prog-id=199 op=UNLOAD
type=BPF msg=audit(1774358512.243:3538): prog-id=200 op=UNLOAD
type=BPF msg=audit(1774358512.244:3539): prog-id=255 op=LOAD
type=BPF msg=audit(1774358512.244:3540): prog-id=245 op=UNLOAD
type=BPF msg=audit(1774358512.245:3541): prog-id=256 op=LOAD
type=BPF msg=audit(1774358512.245:3542): prog-id=257 op=LOAD
type=BPF msg=audit(1774358512.245:3543): prog-id=201 op=UNLOAD
type=BPF msg=audit(1774358512.245:3544): prog-id=202 op=UNLOAD
type=BPF msg=audit(1774358512.246:3545): prog-id=258 op=LOAD
type=BPF msg=audit(1774358512.247:3546): prog-id=235 op=UNLOAD
type=BPF msg=audit(1774358512.247:3547): prog-id=259 op=LOAD
type=BPF msg=audit(1774358512.247:3548): prog-id=260 op=LOAD
type=BPF msg=audit(1774358512.247:3549): prog-id=203 op=UNLOAD
type=BPF msg=audit(1774358512.247:3550): prog-id=204 op=UNLOAD
type=BPF msg=audit(1774358512.247:3551): prog-id=261 op=LOAD
type=BPF msg=audit(1774358512.247:3552): prog-id=210 op=UNLOAD
type=BPF msg=audit(1774358512.248:3553): prog-id=262 op=LOAD
type=BPF msg=audit(1774358512.248:3554): prog-id=205 op=UNLOAD
type=BPF msg=audit(1774358512.249:3555): prog-id=263 op=LOAD
type=BPF msg=audit(1774358512.249:3556): prog-id=240 op=UNLOAD
type=BPF msg=audit(1774358512.251:3557): prog-id=264 op=LOAD
type=BPF msg=audit(1774358512.251:3558): prog-id=215 op=UNLOAD
type=BPF msg=audit(1774358512.251:3559): prog-id=265 op=LOAD
type=BPF msg=audit(1774358512.251:3560): prog-id=220 op=UNLOAD
type=BPF msg=audit(1774358512.252:3561): prog-id=266 op=LOAD
type=BPF msg=audit(1774358512.252:3562): prog-id=206 op=UNLOAD
type=BPF msg=audit(1774358512.252:3563): prog-id=267 op=LOAD
type=BPF msg=audit(1774358512.252:3564): prog-id=268 op=LOAD
type=BPF msg=audit(1774358512.252:3565): prog-id=207 op=UNLOAD
type=BPF msg=audit(1774358512.252:3566): prog-id=208 op=UNLOAD
type=BPF msg=audit(1774358512.253:3567): prog-id=269 op=LOAD
type=BPF msg=audit(1774358512.253:3568): prog-id=209 op=UNLOAD
type=SERVICE_STOP msg=audit(1774358512.273:3569): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1774358512.289:3570): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1774358512.463:3571): pid=47409 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1774358512.463:3572): pid=47409 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358512.466:3573): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358512.466:3574): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358512.474:3575): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358512.474:3576): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358512.475:3577): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=48179 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358512.497:3578): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358512.497:3579): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358512.728:3580): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358512.728:3581): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358512.729:3582): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=48202 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358512.749:3583): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358512.749:3584): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358512.759:3585): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358512.759:3586): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358512.760:3587): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=48219 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358512.787:3588): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358512.787:3589): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358512.800:3590): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358512.800:3591): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358512.801:3592): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=48243 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358512.832:3593): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358512.832:3594): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358512.842:3595): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358512.842:3596): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358512.843:3597): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=48260 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358512.861:3598): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358512.861:3599): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358512.870:3600): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358512.870:3601): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358512.871:3602): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=48278 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1774358512.899:3603): pid=48296 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1774358512.899:3604): pid=48296 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7867656F686A617472666C6B6566647A64666B6E617A62697567696A66696877203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313737343335383531322E3735313432362D34383139392D313630313334393335323936362F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1774358512.900:3605): pid=48296 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1774358512.902:3606): pid=48296 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358513.078:3607): pid=48296 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1774358513.079:3608): pid=48296 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358513.081:3609): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358513.081:3610): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358513.090:3611): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358513.090:3612): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358513.091:3613): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=48311 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358513.111:3614): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358513.111:3615): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358513.441:3616): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358513.441:3617): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358513.442:3618): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=48333 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358513.460:3619): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358513.460:3620): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358513.468:3621): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358513.468:3622): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358513.469:3623): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=48350 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358513.490:3624): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358513.490:3625): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358513.503:3626): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358513.503:3627): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358513.504:3628): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=48374 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358513.532:3629): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358513.532:3630): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358513.541:3631): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358513.541:3632): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358513.542:3633): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=48391 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358513.563:3634): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358513.563:3635): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358513.573:3636): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358513.573:3637): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358513.574:3638): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=48409 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1774358513.600:3639): pid=48427 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1774358513.600:3640): pid=48427 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6267686B776C6561756A726A777367726E74686A6979626A6877616261647966203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313737343335383531332E343632303935332D34383333312D35333130323533373733343332322F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1774358513.601:3641): pid=48427 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1774358513.602:3642): pid=48427 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358513.896:3643): pid=48427 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1774358513.896:3644): pid=48427 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358513.899:3645): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358513.899:3646): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358513.908:3647): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358513.908:3648): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358513.908:3649): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=48440 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358513.927:3650): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358513.927:3651): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358514.373:3652): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358514.373:3653): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358514.374:3654): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=48468 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358514.391:3655): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358514.391:3656): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358514.400:3657): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358514.400:3658): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358514.401:3659): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=48485 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358514.421:3660): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358514.421:3661): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358514.440:3662): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358514.440:3663): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358514.441:3664): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=48509 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358514.468:3665): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358514.468:3666): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358514.477:3667): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358514.477:3668): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358514.477:3669): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=48526 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358514.496:3670): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358514.496:3671): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358514.506:3672): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358514.506:3673): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358514.506:3674): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=48544 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1774358514.536:3675): pid=48562 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1774358514.536:3676): pid=48562 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B70756A626D7572766263726E796478707276787A7875716379696172646667203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313737343335383531342E333933373436342D34383436362D38363736383037383630393636312F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1774358514.537:3677): pid=48562 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1774358514.539:3678): pid=48562 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358514.672:3679): pid=48562 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1774358514.672:3680): pid=48562 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358514.674:3681): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358514.674:3682): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358514.687:3683): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358514.687:3684): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358514.688:3685): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=48568 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358514.709:3686): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358514.709:3687): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358514.717:3688): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358514.718:3689): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358514.719:3690): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=48585 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358514.741:3691): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358514.741:3692): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358514.870:3693): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358514.870:3694): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358514.871:3695): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=48604 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358514.900:3696): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358514.900:3697): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358514.910:3698): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358514.910:3699): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358514.911:3700): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=48621 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358514.931:3701): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358514.931:3702): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358514.942:3703): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358514.942:3704): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358514.943:3705): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=48639 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1774358514.971:3706): pid=48657 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1774358514.971:3707): pid=48657 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D64727679686462636C7961667A6F6A7063746877676871796D78746B6C7A6772203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313737343335383531342E333933373436342D34383436362D38363736383037383630393636312F416E736962616C6C5A5F636F70792E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1774358514.971:3708): pid=48657 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1774358514.973:3709): pid=48657 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358515.113:3710): pid=48657 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1774358515.113:3711): pid=48657 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358515.115:3712): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358515.115:3713): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358515.124:3714): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358515.124:3715): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358515.125:3716): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=48661 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358515.145:3717): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358515.145:3718): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358515.344:3719): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358515.344:3720): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358515.344:3721): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=48681 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358515.362:3722): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358515.362:3723): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358515.370:3724): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358515.370:3725): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358515.371:3726): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=48698 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358515.393:3727): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358515.393:3728): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358515.406:3729): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358515.406:3730): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358515.406:3731): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=48722 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358515.433:3732): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358515.433:3733): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358515.442:3734): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358515.442:3735): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358515.443:3736): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=48739 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358515.461:3737): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358515.461:3738): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358515.470:3739): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358515.470:3740): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358515.471:3741): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=48757 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1774358515.496:3742): pid=48775 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1774358515.496:3743): pid=48775 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D627065767A746E6570626A7176706A6E616D686561656463686C6274656364203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313737343335383531352E333634333933352D34383637392D3136363134353437303938313136342F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1774358515.497:3744): pid=48775 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1774358515.498:3745): pid=48775 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358516.266:3746): pid=48775 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1774358516.266:3747): pid=48775 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358516.268:3748): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358516.268:3749): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358516.277:3750): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358516.277:3751): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358516.278:3752): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=48789 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358516.296:3753): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358516.296:3754): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358516.483:3755): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358516.483:3756): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358516.484:3757): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=48810 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358516.502:3758): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358516.502:3759): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358516.510:3760): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358516.511:3761): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358516.511:3762): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=48827 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358516.534:3763): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358516.534:3764): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358516.548:3765): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358516.548:3766): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358516.549:3767): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=48851 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358516.578:3768): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358516.578:3769): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358516.587:3770): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358516.587:3771): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358516.588:3772): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=48868 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358516.609:3773): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358516.609:3774): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358516.619:3775): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358516.619:3776): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358516.620:3777): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=48886 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1774358516.646:3778): pid=48904 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1774358516.647:3779): pid=48904 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6776656B6B7968656662716B71657A686E6E79696364746C6B746F7A766E6A72203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313737343335383531362E353034323732352D34383830382D3138313139363832373735373535322F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1774358516.647:3780): pid=48904 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1774358516.648:3781): pid=48904 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358516.850:3782): pid=48904 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1774358516.850:3783): pid=48904 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358516.853:3784): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358516.853:3785): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358516.863:3786): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358516.863:3787): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358516.864:3788): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=48917 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358516.886:3789): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358516.886:3790): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358517.545:3791): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358517.545:3792): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358517.546:3793): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=48943 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358517.563:3794): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358517.563:3795): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358517.573:3796): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358517.573:3797): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358517.574:3798): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=48960 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358517.595:3799): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358517.595:3800): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358517.608:3801): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358517.608:3802): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358517.609:3803): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=48984 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358517.636:3804): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358517.636:3805): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358517.645:3806): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358517.645:3807): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358517.645:3808): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=49001 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358517.664:3809): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358517.664:3810): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358517.675:3811): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358517.675:3812): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358517.676:3813): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=49019 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1774358517.702:3814): pid=49037 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1774358517.702:3815): pid=49037 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D69616C706E68707973726F6E7077667A716A6264667170736A686C6F6C657270203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313737343335383531372E3536353635352D34383934312D35343131323632333033373538322F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1774358517.702:3816): pid=49037 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1774358517.704:3817): pid=49037 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358517.906:3818): pid=49037 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1774358517.907:3819): pid=49037 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358517.909:3820): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358517.909:3821): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358517.917:3822): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358517.917:3823): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358517.918:3824): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=49050 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358517.938:3825): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358517.938:3826): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358518.185:3827): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358518.185:3828): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358518.186:3829): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=49070 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358518.205:3830): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358518.205:3831): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358518.214:3832): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358518.214:3833): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358518.215:3834): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=49087 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358518.236:3835): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358518.236:3836): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358518.249:3837): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358518.249:3838): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358518.250:3839): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=49111 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358518.279:3840): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358518.279:3841): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358518.289:3842): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358518.289:3843): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358518.290:3844): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=49128 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358518.308:3845): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358518.309:3846): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358518.317:3847): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358518.317:3848): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358518.318:3849): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=49146 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1774358518.346:3850): pid=49164 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1774358518.346:3851): pid=49164 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D756D776D7A6D6A696C6974697A76687564616472746F737A776C7A686C667777203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313737343335383531382E323037363439352D34393036382D34393132373535383336303239362F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1774358518.346:3852): pid=49164 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1774358518.348:3853): pid=49164 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358518.536:3854): pid=49164 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1774358518.537:3855): pid=49164 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358518.539:3856): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358518.539:3857): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358518.547:3858): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358518.547:3859): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358518.548:3860): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=49174 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358518.566:3861): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358518.566:3862): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358518.808:3863): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358518.808:3864): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358518.809:3865): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=49194 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358518.827:3866): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358518.827:3867): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358518.836:3868): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358518.836:3869): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358518.836:3870): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=49211 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358518.857:3871): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358518.857:3872): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358518.870:3873): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358518.870:3874): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358518.871:3875): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=49235 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358518.899:3876): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358518.899:3877): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358518.908:3878): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358518.908:3879): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358518.909:3880): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=49252 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358518.926:3881): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358518.926:3882): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358518.935:3883): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358518.935:3884): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358518.936:3885): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=49270 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1774358518.962:3886): pid=49288 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1774358518.963:3887): pid=49288 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D62726A697661627662766778736D7A6775646369636D6E6A70727A65766A6771203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313737343335383531382E383239373831382D34393139322D3233333630363037323336343337302F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1774358518.963:3888): pid=49288 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1774358518.964:3889): pid=49288 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358519.159:3890): pid=49288 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1774358519.160:3891): pid=49288 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358519.162:3892): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358519.162:3893): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1774358519.170:3894): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358519.170:3895): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358519.171:3896): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=49298 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358519.191:3897): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358519.191:3898): pid=16561 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_END msg=audit(1774358519.295:3899): pid=14898 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358519.295:3900): pid=14898 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358519.295:3901): pid=14898 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14901 suid=1000 rport=37788 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358519.296:3902): pid=14898 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=14901 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358519.298:3903): pid=14898 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1774358519.298:3904): pid=14898 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358519.298:3905): pid=14898 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=14898 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=BPF msg=audit(1774358527.005:3906): prog-id=270 op=LOAD
type=BPF msg=audit(1774358527.005:3907): prog-id=271 op=LOAD
type=SYSCALL msg=audit(1774358527.005:3907): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000198238 a2=98 a3=0 items=0 ppid=49345 pid=49356 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358527.005:3907): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3965653830636361656631336236666538663837393737613263316566
type=BPF msg=audit(1774358527.006:3908): prog-id=271 op=UNLOAD
type=SYSCALL msg=audit(1774358527.006:3908): arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=49345 pid=49356 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=close AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358527.006:3908): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3965653830636361656631336236666538663837393737613263316566
type=BPF msg=audit(1774358527.006:3909): prog-id=272 op=LOAD
type=SYSCALL msg=audit(1774358527.006:3909): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000198488 a2=98 a3=0 items=0 ppid=49345 pid=49356 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358527.006:3909): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3965653830636361656631336236666538663837393737613263316566
type=BPF msg=audit(1774358527.006:3910): prog-id=273 op=LOAD
type=SYSCALL msg=audit(1774358527.006:3910): arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=c000198218 a2=98 a3=0 items=0 ppid=49345 pid=49356 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358527.006:3910): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3965653830636361656631336236666538663837393737613263316566
type=BPF msg=audit(1774358527.006:3911): prog-id=273 op=UNLOAD
type=SYSCALL msg=audit(1774358527.006:3911): arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=49345 pid=49356 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=close AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358527.006:3911): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3965653830636361656631336236666538663837393737613263316566
type=BPF msg=audit(1774358527.006:3912): prog-id=272 op=UNLOAD
type=SYSCALL msg=audit(1774358527.006:3912): arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=49345 pid=49356 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=close AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358527.006:3912): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3965653830636361656631336236666538663837393737613263316566
type=BPF msg=audit(1774358527.006:3913): prog-id=274 op=LOAD
type=SYSCALL msg=audit(1774358527.006:3913): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001986e8 a2=98 a3=0 items=0 ppid=49345 pid=49356 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358527.006:3913): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3965653830636361656631336236666538663837393737613263316566
type=BPF msg=audit(1774358527.093:3914): prog-id=275 op=LOAD
type=SYSCALL msg=audit(1774358527.093:3914): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c00015c488 a2=98 a3=0 items=0 ppid=49345 pid=49382 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358527.093:3914): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435373761663862343766303661663064623533353034626564326632
type=BPF msg=audit(1774358527.093:3915): prog-id=276 op=LOAD
type=SYSCALL msg=audit(1774358527.093:3915): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00015c218 a2=98 a3=0 items=0 ppid=49345 pid=49382 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358527.093:3915): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435373761663862343766303661663064623533353034626564326632
type=BPF msg=audit(1774358527.093:3916): prog-id=276 op=UNLOAD
type=SYSCALL msg=audit(1774358527.093:3916): arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=49345 pid=49382 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=close AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358527.093:3916): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435373761663862343766303661663064623533353034626564326632
type=BPF msg=audit(1774358527.093:3917): prog-id=275 op=UNLOAD
type=SYSCALL msg=audit(1774358527.093:3917): arch=c000003e syscall=3 success=yes exit=0 a0=13 a1=0 a2=0 a3=0 items=0 ppid=49345 pid=49382 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=close AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358527.093:3917): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435373761663862343766303661663064623533353034626564326632
type=BPF msg=audit(1774358527.093:3918): prog-id=277 op=LOAD
type=SYSCALL msg=audit(1774358527.093:3918): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c00015c6e8 a2=98 a3=0 items=0 ppid=49345 pid=49382 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358527.093:3918): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435373761663862343766303661663064623533353034626564326632
type=NETFILTER_CFG msg=audit(1774358527.328:3919): table=mangle family=2 entries=10 op=xt_replace pid=49446 subj=system_u:system_r:spc_t:s0 comm="iptables"
type=SYSCALL msg=audit(1774358527.328:3919): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55c83ae11f40 items=0 ppid=49395 pid=49446 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358527.328:3919): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65
type=NETFILTER_CFG msg=audit(1774358527.329:3920): table=nat family=2 entries=25 op=xt_replace pid=49448 subj=system_u:system_r:spc_t:s0 comm="iptables"
type=SYSCALL msg=audit(1774358527.329:3920): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55e0f9bcd820 items=0 ppid=49395 pid=49448 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358527.329:3920): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174
type=NETFILTER_CFG msg=audit(1774358527.330:3921): table=filter family=2 entries=31 op=xt_replace pid=49449 subj=system_u:system_r:spc_t:s0 comm="iptables"
type=SYSCALL msg=audit(1774358527.330:3921): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=56222d883260 items=0 ppid=49395 pid=49449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358527.330:3921): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572
type=NETFILTER_CFG msg=audit(1774358527.428:3922): table=mangle family=10 entries=10 op=xt_replace pid=49447 subj=system_u:system_r:spc_t:s0 comm="ip6tables"
type=SYSCALL msg=audit(1774358527.428:3922): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=5610dd0561b0 items=0 ppid=49395 pid=49447 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358527.428:3922): proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65
type=NETFILTER_CFG msg=audit(1774358527.430:3923): table=nat family=10 entries=19 op=xt_replace pid=49450 subj=system_u:system_r:spc_t:s0 comm="ip6tables"
type=SYSCALL msg=audit(1774358527.430:3923): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=5645c20075a0 items=0 ppid=49395 pid=49450 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358527.430:3923): proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174
type=NETFILTER_CFG msg=audit(1774358527.431:3924): table=filter family=10 entries=11 op=xt_replace pid=49451 subj=system_u:system_r:spc_t:s0 comm="ip6tables"
type=SYSCALL msg=audit(1774358527.431:3924): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=557f5ab7a760 items=0 ppid=49395 pid=49451 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358527.431:3924): proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572
type=NETFILTER_CFG msg=audit(1774358527.432:3925): table=filter family=2 entries=33 op=xt_replace pid=49452 subj=system_u:system_r:spc_t:s0 comm="iptables"
type=SYSCALL msg=audit(1774358527.432:3925): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=560d8f844440 items=0 ppid=49395 pid=49452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358527.432:3925): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572
type=NETFILTER_CFG msg=audit(1774358527.435:3926): table=filter family=2 entries=35 op=xt_replace pid=49454 subj=system_u:system_r:spc_t:s0 comm="iptables"
type=SYSCALL msg=audit(1774358527.435:3926): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55c14146c770 items=0 ppid=49395 pid=49454 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358527.435:3926): proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365
type=NETFILTER_CFG msg=audit(1774358527.438:3927): table=filter family=2 entries=36 op=xt_replace pid=49457 subj=system_u:system_r:spc_t:s0 comm="iptables"
type=SYSCALL msg=audit(1774358527.438:3927): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=555db28e0ca0 items=0 ppid=49395 pid=49457 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358527.438:3927): proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669
type=NETFILTER_CFG msg=audit(1774358527.439:3928): table=filter family=2 entries=37 op=xt_replace pid=49458 subj=system_u:system_r:spc_t:s0 comm="iptables"
type=SYSCALL msg=audit(1774358527.439:3928): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55b7f87520b0 items=0 ppid=49395 pid=49458 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358527.439:3928): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572
type=NETFILTER_CFG msg=audit(1774358527.442:3929): table=filter family=2 entries=39 op=xt_replace pid=49460 subj=system_u:system_r:spc_t:s0 comm="iptables"
type=SYSCALL msg=audit(1774358527.442:3929): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=557f85d41940 items=0 ppid=49395 pid=49460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358527.442:3929): proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453
type=NETFILTER_CFG msg=audit(1774358527.443:3930): table=filter family=2 entries=40 op=xt_replace pid=49461 subj=system_u:system_r:spc_t:s0 comm="iptables"
type=SYSCALL msg=audit(1774358527.443:3930): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=56406a08f640 items=0 ppid=49395 pid=49461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358527.443:3930): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572
type=NETFILTER_CFG msg=audit(1774358527.445:3931): table=filter family=2 entries=42 op=xt_replace pid=49463 subj=system_u:system_r:spc_t:s0 comm="iptables"
type=SYSCALL msg=audit(1774358527.445:3931): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55c52e5be980 items=0 ppid=49395 pid=49463 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358527.445:3931): proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D
type=NETFILTER_CFG msg=audit(1774358527.449:3932): table=filter family=2 entries=43 op=xt_replace pid=49466 subj=system_u:system_r:spc_t:s0 comm="iptables"
type=SYSCALL msg=audit(1774358527.449:3932): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=559ea46a5ed0 items=0 ppid=49395 pid=49466 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358527.449:3932): proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53
type=NETFILTER_CFG msg=audit(1774358527.451:3933): table=filter family=2 entries=44 op=xt_replace pid=49467 subj=system_u:system_r:spc_t:s0 comm="iptables"
type=SYSCALL msg=audit(1774358527.451:3933): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=560bc2f7c2c0 items=0 ppid=49395 pid=49467 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358527.451:3933): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572
type=NETFILTER_CFG msg=audit(1774358527.453:3934): table=filter family=2 entries=46 op=xt_replace pid=49469 subj=system_u:system_r:spc_t:s0 comm="iptables"
type=SYSCALL msg=audit(1774358527.453:3934): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55efbca91b40 items=0 ppid=49395 pid=49469 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358527.453:3934): proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244
type=NETFILTER_CFG msg=audit(1774358527.455:3935): table=nat family=2 entries=27 op=xt_replace pid=49470 subj=system_u:system_r:spc_t:s0 comm="iptables"
type=SYSCALL msg=audit(1774358527.455:3935): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=56274b8139f0 items=0 ppid=49395 pid=49470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358527.455:3935): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174
type=NETFILTER_CFG msg=audit(1774358527.457:3936): table=nat family=2 entries=29 op=xt_replace pid=49472 subj=system_u:system_r:spc_t:s0 comm="iptables"
type=SYSCALL msg=audit(1774358527.457:3936): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=5620bdb90280 items=0 ppid=49395 pid=49472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358527.457:3936): proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553
type=NETFILTER_CFG msg=audit(1774358527.460:3937): table=nat family=2 entries=30 op=xt_replace pid=49475 subj=system_u:system_r:spc_t:s0 comm="iptables"
type=SYSCALL msg=audit(1774358527.460:3937): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=5601e4af8630 items=0 ppid=49395 pid=49475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358527.460:3937): proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553
type=NETFILTER_CFG msg=audit(1774358527.476:3938): table=filter family=2 entries=47 op=xt_replace pid=49481 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1774358527.476:3938): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=5630465fd110 items=0 ppid=49395 pid=49481 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358527.476:3938): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1774358527.481:3939): table=nat family=2 entries=31 op=xt_replace pid=49481 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1774358527.481:3939): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=563046600f50 items=0 ppid=49395 pid=49481 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358527.481:3939): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1774358527.505:3940): table=filter family=2 entries=55 op=xt_replace pid=49505 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1774358527.505:3940): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=558bdf9228a0 items=0 ppid=49395 pid=49505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358527.505:3940): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1774358527.506:3941): table=nat family=2 entries=43 op=xt_replace pid=49505 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1774358527.506:3941): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=558bdf926a60 items=0 ppid=49395 pid=49505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358527.506:3941): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1774358527.507:3942): table=filter family=10 entries=13 op=xt_replace pid=49506 subj=system_u:system_r:spc_t:s0 comm="ip6tables"
type=SYSCALL msg=audit(1774358527.507:3942): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=561b095e79a0 items=0 ppid=49395 pid=49506 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358527.507:3942): proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572
type=NETFILTER_CFG msg=audit(1774358527.509:3943): table=filter family=10 entries=15 op=xt_replace pid=49508 subj=system_u:system_r:spc_t:s0 comm="ip6tables"
type=SYSCALL msg=audit(1774358527.509:3943): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55fdb42d1d90 items=0 ppid=49395 pid=49508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358527.509:3943): proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963
type=NETFILTER_CFG msg=audit(1774358527.512:3944): table=filter family=10 entries=16 op=xt_replace pid=49511 subj=system_u:system_r:spc_t:s0 comm="ip6tables"
type=SYSCALL msg=audit(1774358527.512:3944): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55b758d91320 items=0 ppid=49395 pid=49511 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358527.512:3944): proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276
type=NETFILTER_CFG msg=audit(1774358527.513:3945): table=filter family=10 entries=17 op=xt_replace pid=49512 subj=system_u:system_r:spc_t:s0 comm="ip6tables"
type=SYSCALL msg=audit(1774358527.513:3945): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=555c27439760 items=0 ppid=49395 pid=49512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358527.513:3945): proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572
type=NETFILTER_CFG msg=audit(1774358527.515:3946): table=filter family=10 entries=19 op=xt_replace pid=49514 subj=system_u:system_r:spc_t:s0 comm="ip6tables"
type=SYSCALL msg=audit(1774358527.515:3946): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=561dd43a20b0 items=0 ppid=49395 pid=49514 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358527.515:3946): proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453
type=NETFILTER_CFG msg=audit(1774358527.516:3947): table=filter family=10 entries=20 op=xt_replace pid=49515 subj=system_u:system_r:spc_t:s0 comm="ip6tables"
type=SYSCALL msg=audit(1774358527.516:3947): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=565163ebfdd0 items=0 ppid=49395 pid=49515 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358527.516:3947): proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572
type=NETFILTER_CFG msg=audit(1774358527.519:3948): table=filter family=10 entries=22 op=xt_replace pid=49517 subj=system_u:system_r:spc_t:s0 comm="ip6tables"
type=SYSCALL msg=audit(1774358527.519:3948): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55e5a18f61c0 items=0 ppid=49395 pid=49517 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358527.519:3948): proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245
type=NETFILTER_CFG msg=audit(1774358527.522:3949): table=filter family=10 entries=23 op=xt_replace pid=49520 subj=system_u:system_r:spc_t:s0 comm="ip6tables"
type=SYSCALL msg=audit(1774358527.522:3949): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55e5561a9770 items=0 ppid=49395 pid=49520 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358527.522:3949): proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D
type=NETFILTER_CFG msg=audit(1774358527.523:3950): table=filter family=10 entries=24 op=xt_replace pid=49521 subj=system_u:system_r:spc_t:s0 comm="ip6tables"
type=SYSCALL msg=audit(1774358527.523:3950): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=557a47e75b90 items=0 ppid=49395 pid=49521 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358527.523:3950): proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572
type=NETFILTER_CFG msg=audit(1774358527.525:3951): table=filter family=10 entries=26 op=xt_replace pid=49523 subj=system_u:system_r:spc_t:s0 comm="ip6tables"
type=SYSCALL msg=audit(1774358527.525:3951): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55986f21d4e0 items=0 ppid=49395 pid=49523 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358527.525:3951): proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244
type=NETFILTER_CFG msg=audit(1774358527.526:3952): table=nat family=10 entries=21 op=xt_replace pid=49524 subj=system_u:system_r:spc_t:s0 comm="ip6tables"
type=SYSCALL msg=audit(1774358527.526:3952): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55cb6ed2f7e0 items=0 ppid=49395 pid=49524 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358527.526:3952): proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174
type=NETFILTER_CFG msg=audit(1774358527.528:3953): table=nat family=10 entries=23 op=xt_replace pid=49526 subj=system_u:system_r:spc_t:s0 comm="ip6tables"
type=SYSCALL msg=audit(1774358527.528:3953): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=561593191140 items=0 ppid=49395 pid=49526 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358527.528:3953): proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553
type=NETFILTER_CFG msg=audit(1774358527.531:3954): table=nat family=10 entries=24 op=xt_replace pid=49529 subj=system_u:system_r:spc_t:s0 comm="ip6tables"
type=SYSCALL msg=audit(1774358527.531:3954): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=5556a6d20570 items=0 ppid=49395 pid=49529 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358527.531:3954): proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553
type=NETFILTER_CFG msg=audit(1774358527.538:3955): table=filter family=10 entries=27 op=xt_replace pid=49535 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1774358527.538:3955): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=564d20d82930 items=0 ppid=49395 pid=49535 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358527.538:3955): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1774358527.538:3956): table=nat family=10 entries=25 op=xt_replace pid=49535 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1774358527.538:3956): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=564d20d84910 items=0 ppid=49395 pid=49535 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358527.538:3956): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=CRYPTO_KEY_USER msg=audit(1774358575.865:3957): pid=49542 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=49542 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1774358575.866:3958): pid=49541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=49542 suid=74 rport=38006 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1774358575.866:3959): pid=49541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=49542 suid=74 rport=38006 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1774358575.928:3960): pid=49541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1774358575.928:3961): pid=49541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1774358575.936:3962): pid=49541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1774358575.936:3963): pid=49541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=49542 suid=74 rport=38006 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1774358575.937:3964): pid=49541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1774358575.937:3965): pid=49541 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=27 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1774358575.937:3965): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffe903e89d0 a2=4 a3=3e8 items=0 ppid=4703 pid=49541 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358575.937:3965): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1774358575.938:3966): pid=49541 uid=0 auid=1000 ses=27 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pam_selinux default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1774358575.955:3967): pid=49541 uid=0 auid=1000 ses=27 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358575.956:3968): pid=49544 uid=0 auid=1000 ses=27 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=49544 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1774358575.956:3969): pid=49544 uid=0 auid=1000 ses=27 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1774358576.002:3970): pid=49541 uid=0 auid=1000 ses=27 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358576.002:3971): pid=49541 uid=0 auid=1000 ses=27 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358576.003:3972): pid=49541 uid=0 auid=1000 ses=27 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=49545 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358576.021:3973): pid=49541 uid=0 auid=1000 ses=27 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358576.021:3974): pid=49541 uid=0 auid=1000 ses=27 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358576.021:3975): pid=49541 uid=0 auid=1000 ses=27 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=49544 suid=1000 rport=38006 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358576.022:3976): pid=49541 uid=0 auid=1000 ses=27 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=49544 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358576.023:3977): pid=49541 uid=0 auid=1000 ses=27 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1774358576.023:3978): pid=49541 uid=0 auid=1000 ses=27 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358576.024:3979): pid=49541 uid=0 auid=1000 ses=27 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=49541 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1774358576.045:3980): pid=49562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=49562 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1774358576.046:3981): pid=49561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=49562 suid=74 rport=38008 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1774358576.046:3982): pid=49561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=49562 suid=74 rport=38008 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1774358576.106:3983): pid=49561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1774358576.106:3984): pid=49561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1774358576.113:3985): pid=49561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1774358576.113:3986): pid=49561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=49562 suid=74 rport=38008 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1774358576.114:3987): pid=49561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1774358576.114:3988): pid=49561 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=28 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1774358576.114:3988): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7fff359b8690 a2=4 a3=3e8 items=0 ppid=4703 pid=49561 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358576.114:3988): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1774358576.115:3989): pid=49561 uid=0 auid=1000 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pam_selinux default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1774358576.142:3990): pid=49561 uid=0 auid=1000 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358576.143:3991): pid=49564 uid=0 auid=1000 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=49564 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1774358576.144:3992): pid=49564 uid=0 auid=1000 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1774358576.186:3993): pid=49561 uid=0 auid=1000 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358576.186:3994): pid=49561 uid=0 auid=1000 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358576.187:3995): pid=49561 uid=0 auid=1000 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=49565 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358576.407:3996): pid=49561 uid=0 auid=1000 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358576.407:3997): pid=49561 uid=0 auid=1000 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358576.407:3998): pid=49561 uid=0 auid=1000 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=49564 suid=1000 rport=38008 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358576.407:3999): pid=49561 uid=0 auid=1000 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=49564 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358576.408:4000): pid=49561 uid=0 auid=1000 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1774358576.409:4001): pid=49561 uid=0 auid=1000 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358576.409:4002): pid=49561 uid=0 auid=1000 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=49561 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1774358576.424:4003): pid=49583 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=49583 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1774358576.424:4004): pid=49582 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=49583 suid=74 rport=38010 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1774358576.424:4005): pid=49582 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=49583 suid=74 rport=38010 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1774358576.485:4006): pid=49582 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1774358576.485:4007): pid=49582 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1774358576.494:4008): pid=49582 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1774358576.494:4009): pid=49582 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=49583 suid=74 rport=38010 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1774358576.495:4010): pid=49582 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1774358576.495:4011): pid=49582 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=29 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1774358576.495:4011): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffdb63fc620 a2=4 a3=3e8 items=0 ppid=4703 pid=49582 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358576.495:4011): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1774358576.496:4012): pid=49582 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pam_selinux default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1774358576.510:4013): pid=49582 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358576.511:4014): pid=49585 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=49585 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1774358576.512:4015): pid=49585 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1774358576.554:4016): pid=49582 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358576.554:4017): pid=49582 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358576.555:4018): pid=49582 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=49586 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358576.648:4019): pid=49679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=49679 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1774358576.648:4020): pid=49678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=49679 suid=74 rport=45130 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1774358576.648:4021): pid=49678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=49679 suid=74 rport=45130 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1774358576.715:4022): pid=49678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1774358576.715:4023): pid=49678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:49:05:ad:59:7a:57:9b:0c:99:ce:99:12:1e:0e:5b:17:c9:d5:b5:24:d1:86:fd:c7:85:48:7b:09:bb:7a:b4:bf exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1774358576.724:4024): pid=49678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.22 addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1774358576.725:4025): pid=49678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=49679 suid=74 rport=45130 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1774358576.726:4026): pid=49678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.22 addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1774358576.726:4027): pid=49678 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=30 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1774358576.726:4027): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffec76912f0 a2=4 a3=3e8 items=0 ppid=4703 pid=49678 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=30 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358576.726:4027): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1774358576.727:4028): pid=49678 uid=0 auid=1000 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pam_selinux default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.22 addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1774358576.745:4029): pid=49678 uid=0 auid=1000 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.22 addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358576.746:4030): pid=49681 uid=0 auid=1000 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=49681 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1774358576.747:4031): pid=49681 uid=0 auid=1000 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.22 addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1774358576.789:4032): pid=49678 uid=0 auid=1000 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358576.789:4033): pid=49678 uid=0 auid=1000 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358576.790:4034): pid=49678 uid=0 auid=1000 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=49682 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358576.807:4035): pid=49678 uid=0 auid=1000 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358576.807:4036): pid=49678 uid=0 auid=1000 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358576.807:4037): pid=49678 uid=0 auid=1000 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=49681 suid=1000 rport=45130 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358576.808:4038): pid=49678 uid=0 auid=1000 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=49681 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358576.809:4039): pid=49678 uid=0 auid=1000 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.22 addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1774358576.810:4040): pid=49678 uid=0 auid=1000 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.22 addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358576.810:4041): pid=49678 uid=0 auid=1000 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=49678 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1774358576.827:4042): pid=49701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=49701 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1774358576.827:4043): pid=49700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=49701 suid=74 rport=45146 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1774358576.828:4044): pid=49700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=49701 suid=74 rport=45146 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1774358576.899:4045): pid=49700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1774358576.899:4046): pid=49700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:49:05:ad:59:7a:57:9b:0c:99:ce:99:12:1e:0e:5b:17:c9:d5:b5:24:d1:86:fd:c7:85:48:7b:09:bb:7a:b4:bf exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1774358576.908:4047): pid=49700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.22 addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1774358576.908:4048): pid=49700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=49701 suid=74 rport=45146 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1774358576.909:4049): pid=49700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.22 addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1774358576.909:4050): pid=49700 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=31 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1774358576.909:4050): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7fff9e2bb0a0 a2=4 a3=3e8 items=0 ppid=4703 pid=49700 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=31 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358576.909:4050): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1774358576.910:4051): pid=49700 uid=0 auid=1000 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pam_selinux default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.22 addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1774358576.925:4052): pid=49700 uid=0 auid=1000 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.22 addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358576.926:4053): pid=49703 uid=0 auid=1000 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=49703 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1774358576.927:4054): pid=49703 uid=0 auid=1000 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.22 addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1774358576.968:4055): pid=49700 uid=0 auid=1000 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358576.968:4056): pid=49700 uid=0 auid=1000 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358576.969:4057): pid=49700 uid=0 auid=1000 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=49704 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358576.990:4058): pid=49700 uid=0 auid=1000 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358576.990:4059): pid=49700 uid=0 auid=1000 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358576.990:4060): pid=49700 uid=0 auid=1000 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=49703 suid=1000 rport=45146 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358576.991:4061): pid=49700 uid=0 auid=1000 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=49703 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358576.992:4062): pid=49700 uid=0 auid=1000 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.22 addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1774358576.992:4063): pid=49700 uid=0 auid=1000 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.22 addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358576.992:4064): pid=49700 uid=0 auid=1000 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=49700 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1774358577.010:4065): pid=49723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=49723 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1774358577.011:4066): pid=49722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=49723 suid=74 rport=45154 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1774358577.011:4067): pid=49722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=49723 suid=74 rport=45154 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1774358577.077:4068): pid=49722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1774358577.077:4069): pid=49722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:49:05:ad:59:7a:57:9b:0c:99:ce:99:12:1e:0e:5b:17:c9:d5:b5:24:d1:86:fd:c7:85:48:7b:09:bb:7a:b4:bf exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1774358577.086:4070): pid=49722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.22 addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1774358577.086:4071): pid=49722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=49723 suid=74 rport=45154 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1774358577.087:4072): pid=49722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.22 addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1774358577.088:4073): pid=49722 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=32 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1774358577.088:4073): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffffaa87a90 a2=4 a3=3e8 items=0 ppid=4703 pid=49722 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=32 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358577.088:4073): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1774358577.088:4074): pid=49722 uid=0 auid=1000 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pam_selinux default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.22 addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1774358577.108:4075): pid=49722 uid=0 auid=1000 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.22 addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358577.109:4076): pid=49725 uid=0 auid=1000 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=49725 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1774358577.110:4077): pid=49725 uid=0 auid=1000 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.22 addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1774358577.151:4078): pid=49722 uid=0 auid=1000 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358577.151:4079): pid=49722 uid=0 auid=1000 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358577.152:4080): pid=49722 uid=0 auid=1000 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=49726 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358577.173:4081): pid=49722 uid=0 auid=1000 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1774358577.174:4082): pid=49722 uid=0 auid=1000 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358577.174:4083): pid=49722 uid=0 auid=1000 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=49725 suid=1000 rport=45154 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358577.174:4084): pid=49722 uid=0 auid=1000 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=49725 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1774358577.175:4085): pid=49722 uid=0 auid=1000 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.22 addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1774358577.175:4086): pid=49722 uid=0 auid=1000 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.22 addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358577.176:4087): pid=49722 uid=0 auid=1000 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=49722 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1774358577.190:4088): pid=49744 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=49744 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1774358577.191:4089): pid=49743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=49744 suid=74 rport=45166 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1774358577.191:4090): pid=49743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=49744 suid=74 rport=45166 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1774358577.258:4091): pid=49743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1774358577.258:4092): pid=49743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:49:05:ad:59:7a:57:9b:0c:99:ce:99:12:1e:0e:5b:17:c9:d5:b5:24:d1:86:fd:c7:85:48:7b:09:bb:7a:b4:bf exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1774358577.267:4093): pid=49743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.22 addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1774358577.268:4094): pid=49743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=49744 suid=74 rport=45166 laddr=10.0.0.22 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1774358577.268:4095): pid=49743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.22 addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1774358577.268:4096): pid=49743 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=33 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1774358577.268:4096): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffe11044e90 a2=4 a3=3e8 items=0 ppid=4703 pid=49743 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=33 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1774358577.268:4096): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1774358577.269:4097): pid=49743 uid=0 auid=1000 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pam_selinux default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.22 addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1774358577.283:4098): pid=49743 uid=0 auid=1000 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.22 addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358577.284:4099): pid=49746 uid=0 auid=1000 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=49746 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1774358577.285:4100): pid=49746 uid=0 auid=1000 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.22 addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1774358577.326:4101): pid=49743 uid=0 auid=1000 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1774358577.326:4102): pid=49743 uid=0 auid=1000 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.22 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1774358577.327:4103): pid=49743 uid=0 auid=1000 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:1c:43:3c:50:13:0a:ad:fb:1f:3d:34:2b:d8:16:54:66:b4:7d:59:ca:e2:2b:a5:47:01:42:3a:90:fc:cf:bf direction=? spid=49747 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1774358577.430:4104): pid=49797 uid=1000 auid=1000 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1774358577.430:4105): pid=49797 uid=1000 auid=1000 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/tmp/ansible-logs" cmd=6370202F6574632F6368726F6E792E636F6E66202F746D702F616E7369626C652D6C6F67732F6C6F67732F73797374656D2F exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1774358577.430:4106): pid=49797 uid=1000 auid=1000 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1774358577.432:4107): pid=49797 uid=1000 auid=1000 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358577.434:4108): pid=49797 uid=1000 auid=1000 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1774358577.434:4109): pid=49797 uid=1000 auid=1000 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_ACCT msg=audit(1774358577.448:4110): pid=49802 uid=1000 auid=1000 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1774358577.448:4111): pid=49802 uid=1000 auid=1000 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/tmp/ansible-logs" cmd=6370202F7661722F6C6F672F6D65737361676573202F746D702F616E7369626C652D6C6F67732F6C6F67732F73797374656D2F exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1774358577.449:4112): pid=49802 uid=1000 auid=1000 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1774358577.450:4113): pid=49802 uid=1000 auid=1000 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1774358577.454:4114): pid=49802 uid=1000 auid=1000 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1774358577.454:4115): pid=49802 uid=1000 auid=1000 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_ACCT msg=audit(1774358577.464:4116): pid=49806 uid=1000 auid=1000 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1774358577.464:4117): pid=49806 uid=1000 auid=1000 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/tmp/ansible-logs" cmd=62617368202D63206370202D72202F7661722F6C6F672F61756469742F2A202F746D702F616E7369626C652D6C6F67732F6C6F67732F73797374656D2F61756469742F20323E2F6465762F6E756C6C exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1774358577.465:4118): pid=49806 uid=1000 auid=1000 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1774358577.466:4119): pid=49806 uid=1000 auid=1000 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"